Matcha security audit

I designed the GoPlus token-check integration for Matcha, the decentralized trading platform by 0x. The work covers source code, tax, minting, and honeypot signals, along with loading, pending, warning, and result states, so people can review common token warnings while preparing a swap.

Role
I designed the integration and how the audit results are presented.
Outcome
People can review common token warnings while preparing a swap.
Product
Matcha - DEX Aggregator by 0x
Industry
DeFi / Web3 / Fintech
Link
matcha.xyz

Showing token warnings before a swap

  • I designed how GoPlus token checks appear inside Matcha’s trade flow.

Show what was checked

  • Separated source-code, tax, minting, and honeypot signals so each finding is readable.
  • Kept the warnings beside the trade people are preparing.

Pending isn’t a pass

  • Made loading and pending states distinct from completed results.
  • The checks offer context, not a promise that a token is safe.