Prototype preview — simulated wallet and sample data. No real funds. v1 contracts are on the Base Sepolia testnet (not audited). How the demo works →
How TrustBridge works
A guide for reviewers, assessors and auditors
Why I built TrustBridge
Crypto was built so people wouldn't have to trust each other, yet when two people want to swap assets directly, it still comes down to trust. Someone has to send first. Once they do, they're relying on the other side to keep their word: send the right amount, on time, without stalling, changing the terms, or disappearing. In P2P and OTC trading, that "who goes first?" moment is where deals fall apart and where people get burned. The usual answers are to trust a stranger, or to hand your funds to a middleman who could freeze them, lose them or be hacked. I built TrustBridge to remove that moment. Each deal gets its own 2-of-2 multisig vault owned by the two parties. Both deposit, both confirm, and the assets swap in a single atomic transaction: either both sides receive what was agreed, or both get their own funds back. No one goes first, no one can hold the other to ransom, and TrustBridge never holds the keys.
— Craig Evans, Founder
What you are looking at
TrustBridge is white-label deal-room escrow infrastructure for P2P and OTC crypto trading. Each deal gets its own Safe 2-of-2 smart account owned by the two parties. Both deposit, both confirm, and the assets swap in one transaction. If the deal does not complete, each party gets their own deposit back. TrustBridge is designed to be non-custodial: it holds no keys and cannot move, freeze or redirect anyone's funds.
What is real and what is simulated
| This app (demo) | A simulated demo wallet and sample data. Your own wallet is never connected to the deal flow. Deals are stored only in your browser. No real funds, nothing is sent on-chain. It shows the full user journey and screen design. |
| The smart contracts | Real. Built, tested and deployed on the Base Sepolia TESTNET on 2 November 2026, with source code verified on Basescan, and a completed two-party demo deal. Test tokens only — no value. |
| Not yet done | Independent senior Solidity / Safe review, security audit, mainnet deployment. Nothing is on mainnet. |
Connecting this app to the live contracts is the next milestone (M2).
Try the demo
- 0. Connect demo wallet — the first step. A random demo address is created for you; your own wallet is never connected. In the live product your own wallet is your identity, and no account is needed.
- 1. Create Deal — choose the assets and amounts, time limit, price band and plan. Party A creates the deal.
- 2. Deal Room — Party B joins; both parties negotiate in a recorded chat; any change to terms is logged and must be agreed by both.
- 3. Lock & Fund — both parties deposit into the deal's own vault.
- 4. Complete Deal — each party confirms delivery after reviewing a plain-English summary of exactly what moves (ConfirmDeliveryModal); the swap releases both sides at once.
- 5. Dashboard — deal status and history; concluded deals are read-only with a downloadable audit report (PDF).
How funds can move (and only these ways)
- •Both parties confirm delivery → atomic swap
- •One party confirms, the other does not respond within the auto-release window (15 minutes on Free and Pro) → the same swap
- •Both parties agree to cancel → each deposit returned
- •Party A cancels before the deal is fully funded → each deposit returned
- •Expiry, or a price-band breach that is not resolved → each deposit returned, zero fee
The completion fee is paid by Party A out of the asset Party A receives; Party B always receives the full agreed amount. There is no dispute resolution by any person in v1, and no admin power over live deals.
The three plans
Every deal uses the same protections, whatever the plan. Paid plans unlock higher limits, more control and a lower completion fee. Party B never needs a plan — Party A's plan applies to the deal.
Free
For individuals trying P2P escrow
●
Pro
For active P2P and OTC traders
●●
Enterprise
For OTC desks, P2P operators and white-label partners
●●●
Included on every plan
- ✓Its own Safe 2-of-2 vault for every deal
- ✓Both deposit, both confirm, atomic swap
- ✓ConfirmDeliveryModal before every release
- ✓Automatic refund at expiry — no admin override
- ✓Chainlink price check
- ✓Fee only when a deal completes — zero on cancel, expiry or refund
- ✓Party B always free
- ✓Recorded deal room chat and change history
- ✓Raise a Concern record
- ✓Approved tokens only, $10 minimum deal
- ✓Same-asset swaps refused (anti-money-laundering control)
- ✓Downloadable audit report for concluded deals (demo)
What differs
| Feature | Free | Pro | Enterprise |
|---|---|---|---|
| Maximum deal value | $5,000 | $500,000 | No plan limit |
| Active deals at once | 5 | Unlimited | Unlimited |
| Maximum deal length | 7 days (preset times) | 30 days (custom times) | 365 days (custom times) |
| Price band | Fixed at ±15% | Set by the parties | Set by the parties |
| If the price leaves the band | Deal cancels, deposits returned | 30-minute renegotiation window | 2-hour renegotiation window |
| Auto-release after one party confirms | 15 minutes, always on | 15 minutes, always on | Set by the operator (default 2 hours), can be switched off |
| Amendments for longer deals | — | ✓ | ✓ |
| White-label operator (own brand and fee wallet) | — | — | ✓ |
| API access and operator dashboard | — | — | Planned |
| TrustBridge Vault (shared vaults) | — | Planned | Planned, incl. multi-party |
| Completion fee | Standard | Lower | Lowest |
Limits are enforced by the smart contracts and fixed when a deal is created. On testnet a $50,000 per-deal launch cap also applies. Plan pricing will be published at launch.
Live testnet contracts (Base Sepolia, chain 84532)
Source code is verified — open any link and choose the Contract tab.
| TrustBridgeFactory | 0xfC33…19f3 |
| TrustBridgeConfig | 0x416F…0849 |
| TrustBridgeModule | 0x2aa2…73Dc |
| TrustBridgeGuard | 0x9504…FA90 |
| DealSettlement (library) | 0x7Cf0…EFeF |
| ChainlinkPriceAdapter | 0xE297…3261 |
Deal Safes use the official, unmodified Safe v1.4.1 contracts. Prices come from the live Chainlink Base Sepolia feeds. A $50,000 per-deal launch cap applies on testnet.
The completed demo deal (deal #1)
100 test USDC for test WETH between two separate wallets, Free plan, 2 November 2026.
| Deal created | 0xdd7f…fce6 |
| Party B joined by invite | 0x6813…bee1 |
| Counterparty confirmed — deal Safe created | 0xd14f…098f |
| Party A deposited | 0x1c38…1b3e |
| Party B deposited — deal locked | 0x51ac…d8ad |
| Party A confirmed delivery | 0xb049…b5d4 |
| Party B confirmed — atomic swap released | 0xf999…b649 |
| Deal Safe | 0xC657…5C4C |
Party B received the full 100 test USDC; Party A received the test WETH less the 1% fee; the deal Safe was left empty.
Read the deal live from the chain (optional — connects your own wallet, read-only) →How the code was tested
- •331 automated tests: unit, fuzz, property and invariant tests
- •A whole-lifecycle random campaign of 358,400 actions, about half with company Safe multisigs as parties — no funds created, lost, misdirected or stuck
- •Static analysis (Slither): no high or medium findings
- •Mutation check: 12 deliberately injected bugs, all 12 caught
- •Not yet independently reviewed or audited
Documents (open in a new tab)
For reviewers and auditors
The contract repository, test suite and a reviewer pack (system overview, threat model, properties, known limitations and tool output) are available under NDA. Contact Craig Evans, Founder — craig@trustbridgeprotocol.xyz
Designed to be non-custodial. Contracts on Base Sepolia testnet only — not reviewed, not audited, not on mainnet.