Risk Disclosures

DRAFT — NOT LEGAL ADVICE. HAVE A LAWYER REVIEW BEFORE PUBLISHING OR RELYING ON THIS. It is not in force.

Last updated: [DATE] · Draft v0.1

Please read these risks before using Milestone. They form part of our Terms of Service. Only use funds you can afford to lose.

Milestone is non-custodial

Your USDC is held by a smart contract, not by Milestone or any company. Milestone can't move, freeze, reverse or return funds, can't recover lost keys, and can't undo a transaction you signed. If you lose access to your wallet, funds owed to you may be lost permanently.

Audit status

The Milestone smart contract has not yet been audited by an independent security firm. [AFTER AUDIT, REPLACE WITH: "The contract was reviewed by [FIRM] in [MONTH YEAR]. Report: [LINK]. All findings were fixed or acknowledged as listed in the report."] It has an extensive automated test suite (unit, fuzz and invariant tests, 100% line and branch coverage) and static analysis, but tests and audits reduce risk — they don't eliminate it.

Smart contract risk

The contract could contain bugs or design flaws that lead to partial or total loss of funds, or funds becoming stuck. The contract is not upgradeable: a fixed version would be a new contract, and funds in the old one follow the old rules. To limit exposure during launch, the contract limits the size of each deal and the total amount it can hold, and new deals can be paused. Pausing never blocks payouts, refunds, disputes or withdrawals from existing deals.

Blockchain and network risk

Blockchains can be congested, slow or expensive, or suffer outages, forks or attacks. Base is a layer-2 network that depends on its sequencer and on Ethereum. Time-based rules (review windows, dispute timeouts, delivery deadlines) use block timestamps, and a transaction may land later than you expect — act well before deadlines.

USDC and stablecoin risk

USDC is issued by Circle, not Milestone. Its value could lose its dollar peg. Circle can blacklist addresses, including your wallet, a counterparty's wallet or the Milestone contract itself, which could block payouts or withdrawals until the blacklist is lifted. If your own address is blacklisted, you can withdraw any credit owed to you to a different address you control.

Counterparty and referee risk

Milestone doesn't vet clients, freelancers or referees and doesn't judge work quality. A counterparty might not deliver, might approve late, or might dispute in bad faith. A referee you appoint could be wrong, biased or unavailable; their decision is final on-chain. If a dispute isn't resolved before its timeout, the milestone is split 50/50. Referee fees, if any, are paid out of the disputed milestone.

Security and phishing risk

Scammers copy websites, apps, ads and social accounts. Always check the URL, and check that the contract address in your wallet matches the official addresses below. Milestone will never ask for your seed phrase or ask you to "validate" or "sync" your wallet. Never sign messages or transactions you don't understand. Beware of unlimited token approvals.

Legal, tax and regulatory risk

Laws about digital assets are changing and differ by country. Changes could restrict or end the Interface in your region. You are responsible for your own taxes, invoices and contracts. Sanctioned persons and regions may not use the Interface.

No investment advice; no token

Milestone is a payment tool, not an investment. Nothing we publish is financial, investment, legal or tax advice. Milestone has no token. Any future token, if one were ever created, would not be an investment, and you should not expect profit from Milestone's efforts. Anyone offering you a "Milestone token", airdrop or presale is not us unless it's announced on our official channels — treat it as a scam.

Official contract addresses