STARKNET_SEPOLIA_DEPLOYMENTS.md

cf-invariants — Starknet sepolia deployments

Linked from README.md Status section — the live-network proof artifact for cf-invariants. Kept at repo root (instead of docs/deploy-log/) for grant-reviewer transparency: each contract here is independently verifiable on Voyager and reproducible from the commands documented below.

Network: Starknet sepolia Deployer account: 0x06a45089230bb9dc2d47f46ea95334358addb12bc9bb773a1f39ca38464cb45d Deployed (UTC): 2026-05-31T21:55:53Z (first 3 contracts), 2026-06-01T22:32:00Z (Week 3 batch 1 — erc4626_ref, multisig_ref, erc721_ref), 2026-06-02T17:30:00Z (Week 4 batch 1 — lending_ref, staking_ref, vesting_ref), 2026-06-03T16:45:00Z (Week 4 batch 2 — timelock_ref, payment_splitter_ref, oracle_ref) Tooling: scarb 2.18.0, sncast 0.60.0

These 12 contracts are the reference suite used by cf-invariants (stateful invariant testing for Cairo 2.x). Each one has a deliberate planted bug on a different surface (token supply accounting, governance executed-state, AMM constant-product, vault share/asset conservation, multisig threshold monotonicity, NFT uniqueness, per-user lending solvency, stake-slash conservation, time-bounded release supply cap, delay-respected execution, proportional-share release, push-update timestamp monotonicity) and serves as both a regression fixture and on-chain proof of cf-invariants' Cairo 2.x target coverage.

Each entry below is verified on-chain (the deployed address resolves to the declared class hash via sncast get class-hash-at --network sepolia, run after the deploy tx was accepted on L2) and source-verified on Voyager (Cairo source compiled by Voyager from the committed references/<name>/ tree reproduces the on-chain class hash; see "Voyager source verification" line under each contract).

ERC20Ref — erc20_planted_bug

• Contract address: 0x01def82c386ce902d589c83c8756a839f204f9bf7ccef02403686158818b055b
• Class hash: 0x0555041a049222ee45d16c7e4006012313d11269ef78a9613ac4c264f36aa450
• Declare tx: 0x054854b1643f3c63cab659cc0bed4584cb1d91995f590a82dfafee3d43e3c7e0
• Deploy tx: 0x076d3cd14057c9574c1b20bb0285fc4ff7deb11bcceeac2e8ade5ef6aee070f3
• Voyager (address): https://sepolia.voyager.online/contract/0x01def82c386ce902d589c83c8756a839f204f9bf7ccef02403686158818b055b
• Voyager (class): https://sepolia.voyager.online/class/0x0555041a049222ee45d16c7e4006012313d11269ef78a9613ac4c264f36aa450
• Constructor calldata: 1000000 0 (u256 low=1_000_000, high=0 → initial_supply = 1_000_000)
• On-chain verification: confirmed — sncast get class-hash-at returned 0x0555041a049222ee45d16c7e4006012313d11269ef78a9613ac4c264f36aa450, matches declared class_hash
• Voyager source verification: ✅ Verified (Cairo 2.18.0, scarb 2.18.0) — job 5fc93305-2a5b-42c9-a014-add825dc596d returned status=4 "Verification successful" (see https://sepolia-api.voyager.online/beta/class-verify/job/5fc93305-2a5b-42c9-a014-add825dc596d)

Governance — governance

• Contract address: 0x066738b17bd666f32c57c1c0c779ce7d1cf6366b2402f7ef93f88ede5cf794e6
• Class hash: 0x02bd66ef6c73e7f44974c5af9db3b6bac5de48a44cf43b2b3c0a6491bad7c33e
• Declare tx: 0x041d27428d740c1e9dc64f1e88177b6029d0fd727cda8efbae74656de045d6b1
• Deploy tx: 0x008897042ecddae1040aeab768d31706e4e6a3f00c9b0eb4fd17de6e936d72af
• Voyager (address): https://sepolia.voyager.online/contract/0x066738b17bd666f32c57c1c0c779ce7d1cf6366b2402f7ef93f88ede5cf794e6
• Voyager (class): https://sepolia.voyager.online/class/0x02bd66ef6c73e7f44974c5af9db3b6bac5de48a44cf43b2b3c0a6491bad7c33e
• Constructor calldata: (none)
• On-chain verification: confirmed — sncast get class-hash-at returned 0x02bd66ef6c73e7f44974c5af9db3b6bac5de48a44cf43b2b3c0a6491bad7c33e, matches declared class_hash
• Voyager source verification: ✅ Verified (Cairo 2.18.0, scarb 2.18.0) — job 38ca07ff-0c51-46a3-973d-1d4ae1155095 returned status=4 "Verification successful" (see https://sepolia-api.voyager.online/beta/class-verify/job/38ca07ff-0c51-46a3-973d-1d4ae1155095)

SingleSideAmm — single_side_amm

• Contract address: 0x05351db8cf106a3710caadc8b66f8ecfee686c75eb8142bd91f7b76aa51c81f8
• Class hash: 0x051141a6fb014e49c3baaaa385981319c000541f0f69534852de1d85d6d9dc65
• Declare tx: 0x03e4e2e7bcde0cc4b0c7cdb9a2afaa40014722cc30def6a76fb0b076b9a0b3a0
• Deploy tx: 0x0337ac082d60f222391dfa668e91ce084b917d96a7ceac1029ace5b0860c5f15
• Voyager (address): https://sepolia.voyager.online/contract/0x05351db8cf106a3710caadc8b66f8ecfee686c75eb8142bd91f7b76aa51c81f8
• Voyager (class): https://sepolia.voyager.online/class/0x051141a6fb014e49c3baaaa385981319c000541f0f69534852de1d85d6d9dc65
• Constructor calldata: 1000000 1000000 (u128 init_a, u128 init_b → reserve_a = reserve_b = 1_000_000)
• On-chain verification: confirmed — sncast get class-hash-at returned 0x051141a6fb014e49c3baaaa385981319c000541f0f69534852de1d85d6d9dc65, matches declared class_hash
• Voyager source verification: ✅ Verified (Cairo 2.18.0, scarb 2.18.0) — job 6ffbd3ad-6309-49df-9c36-bd25a790ff4d returned status=4 "Verification successful" (see https://sepolia-api.voyager.online/beta/class-verify/job/6ffbd3ad-6309-49df-9c36-bd25a790ff4d)

ERC4626Ref — erc4626_ref

• Contract address: 0x01d31e8fa3772b7ec3a21e8130f928d6ecbd66832752a346ad3d953fecbfe08c
• Class hash: 0x02fa25cf0cccfcc58de0f412e42ff2765282a9e105ac8fee7f87f137e5002c6e
• Declare tx: 0x031d84ad54b0febfdc3a31e94480779b3213683b03277d8618b5c88b9e90fa50
• Deploy tx: 0x07e636c963bef62309f00533adfeb146464166a83e514c754d08b3a4da2d25b3
• Voyager (address): https://sepolia.voyager.online/contract/0x01d31e8fa3772b7ec3a21e8130f928d6ecbd66832752a346ad3d953fecbfe08c
• Voyager (class): https://sepolia.voyager.online/class/0x02fa25cf0cccfcc58de0f412e42ff2765282a9e105ac8fee7f87f137e5002c6e
• Constructor calldata: 1000000 0 (u256 low=1_000_000, high=0 → initial_assets = 1_000_000)
• On-chain verification: confirmed — sncast get class-hash-at returned 0x02fa25cf0cccfcc58de0f412e42ff2765282a9e105ac8fee7f87f137e5002c6e, matches declared class_hash
• Voyager source verification: ✅ Verified (Cairo 2.18.0, scarb 2.18.0) — job 4b463ce7-b2a7-4170-a182-aaf97a16c4cc returned status=4 "Verification successful" (see https://sepolia-api.voyager.online/beta/class-verify/job/4b463ce7-b2a7-4170-a182-aaf97a16c4cc)

MultisigRef — multisig_ref

• Contract address: 0x04fe55b17f86d9e5f3888271b72e9c161a37a943de4ce30760c7b9295edceef8
• Class hash: 0x06b8b7fb2e034b1d5c04684569f002a97477acf37d390383d2172aea5da31866
• Declare tx: 0x00a4b60a257cce54200bc8e961ca94b505c323f27ad89ab0a0cdebf5ffbaa388
• Deploy tx: 0x042d772070ddc76aee180901794fecdad7d93443841f1e3f6b75ab55b29557de
• Voyager (address): https://sepolia.voyager.online/contract/0x04fe55b17f86d9e5f3888271b72e9c161a37a943de4ce30760c7b9295edceef8
• Voyager (class): https://sepolia.voyager.online/class/0x06b8b7fb2e034b1d5c04684569f002a97477acf37d390383d2172aea5da31866
• Constructor calldata: 0xE1 0xE2 0xE3 2 (owner_a, owner_b, owner_c, threshold=2 — a 2-of-3 multisig)
• On-chain verification: confirmed — sncast get class-hash-at returned 0x06b8b7fb2e034b1d5c04684569f002a97477acf37d390383d2172aea5da31866, matches declared class_hash
• Voyager source verification: ✅ Verified (Cairo 2.18.0, scarb 2.18.0) — job 55ec1077-ab6b-4e7e-b782-4bcf8ddf5363 returned status=4 "Verification successful" (see https://sepolia-api.voyager.online/beta/class-verify/job/55ec1077-ab6b-4e7e-b782-4bcf8ddf5363)

ERC721Ref — erc721_ref

• Contract address: 0x02b5aa109da3dd5b129d07375f0990cf967dd211b097bc5be52282a2509655fa
• Class hash: 0x066c91d33774da9425144a36c9d7b2e0cc7463de7bfa92f19b1d09d81b73b0be
• Declare tx: 0x000cb22ebf193cbde8dda71d9d7534dc9ef79fe8cfa9508576175649b73b39a9
• Deploy tx: 0x030724f5b9fc6bea5aa19549ae6a1510fde196237f8f7983837e06fcfbe4ec60
• Voyager (address): https://sepolia.voyager.online/contract/0x02b5aa109da3dd5b129d07375f0990cf967dd211b097bc5be52282a2509655fa
• Voyager (class): https://sepolia.voyager.online/class/0x066c91d33774da9425144a36c9d7b2e0cc7463de7bfa92f19b1d09d81b73b0be
• Constructor calldata: (none)
• On-chain verification: confirmed — sncast get class-hash-at returned 0x066c91d33774da9425144a36c9d7b2e0cc7463de7bfa92f19b1d09d81b73b0be, matches declared class_hash
• Voyager source verification: ✅ Verified (Cairo 2.18.0, scarb 2.18.0) — job 4cdf4756-64d6-4bbf-b768-4b3f19061a34 returned status=4 "Verification successful" (see https://sepolia-api.voyager.online/beta/class-verify/job/4cdf4756-64d6-4bbf-b768-4b3f19061a34)

LendingRef — lending_ref

• Contract address: 0x0627b8abe3b11a2593fc5204f9b86868ff00789b7cc090c3d3e3bfcf58c57c52
• Class hash: 0x07fea62576d286691907e99a831bd6d90ce88eb0bb38651dbd3f7186b5fdb799
• Declare tx: 0x05f202e969e4ecd7984843c9bca021bc5d4376a41149ece86ea2d2b56e0cb4dd
• Deploy tx: 0x01acf0aa40dacba00a282a71c58dd496174542c8c1c23f7c91c5660c9422ff26
• Voyager (address): https://sepolia.voyager.online/contract/0x0627b8abe3b11a2593fc5204f9b86868ff00789b7cc090c3d3e3bfcf58c57c52
• Voyager (class): https://sepolia.voyager.online/class/0x07fea62576d286691907e99a831bd6d90ce88eb0bb38651dbd3f7186b5fdb799
• Constructor calldata: 5000 (u32 ltv_bps = 5000 → 50% max LTV)
• On-chain verification: confirmed — sncast get class-hash-at returned 0x07fea62576d286691907e99a831bd6d90ce88eb0bb38651dbd3f7186b5fdb799, matches declared class_hash
• Voyager source verification: ✅ Verified (Cairo 2.18.0, scarb 2.18.0) — job ed571715-9135-443f-86c7-4973381abebf returned status=4 "Verification successful" (see https://sepolia-api.voyager.online/beta/class-verify/job/ed571715-9135-443f-86c7-4973381abebf)

StakingRef — staking_ref

• Contract address: 0x014e72228c8aa95e5aad34fdcb00186d335e6f96c3ed4c6c632b85e9aaea4e09
• Class hash: 0x07f4934475d459e592d393d2ba70fbff4d5cd7d71de00012c3a021e6574c0e0d
• Declare tx: 0x07350f865f633d25dd2a61a98e0409804acf401fd6aecefb5acf8ae73319f923
• Deploy tx: 0x060cd3df2ed1a5692d68cd00fe231b2a36054501947c01462c2fe2e42a82281b
• Voyager (address): https://sepolia.voyager.online/contract/0x014e72228c8aa95e5aad34fdcb00186d335e6f96c3ed4c6c632b85e9aaea4e09
• Voyager (class): https://sepolia.voyager.online/class/0x07f4934475d459e592d393d2ba70fbff4d5cd7d71de00012c3a021e6574c0e0d
• Constructor calldata: 0x55 (slasher = 0x55)
• On-chain verification: confirmed — sncast get class-hash-at returned 0x07f4934475d459e592d393d2ba70fbff4d5cd7d71de00012c3a021e6574c0e0d, matches declared class_hash
• Voyager source verification: ✅ Verified (Cairo 2.18.0, scarb 2.18.0) — job a6ccfd42-ec2c-474e-8ea1-ab5d0cf3e6ad returned status=4 "Verification successful" (see https://sepolia-api.voyager.online/beta/class-verify/job/a6ccfd42-ec2c-474e-8ea1-ab5d0cf3e6ad)

VestingRef — vesting_ref

• Contract address: 0x032537f261a271e4ccf0ac0e90e41c0f994f9efda69baaa5b66d055b4a0abd38
• Class hash: 0x0506d352f0c9efb8c4f0d91aa97d22743cd707967ed9d17f317c1d47d8de0eeb
• Declare tx: 0x063489db4054c0dd84563f46b4a1b91a54722f42e82ecee676ab50beec5a58b2
• Deploy tx: 0x012ba368adb98af4dfd6bb8b546bdc232eed05ce94483af3afd4700782ccee3d
• Voyager (address): https://sepolia.voyager.online/contract/0x032537f261a271e4ccf0ac0e90e41c0f994f9efda69baaa5b66d055b4a0abd38
• Voyager (class): https://sepolia.voyager.online/class/0x0506d352f0c9efb8c4f0d91aa97d22743cd707967ed9d17f317c1d47d8de0eeb
• Constructor calldata: 0xBE 1000000 0 1000000 2000000 (beneficiary=0xBE, total_grant=u256(low=1_000_000, high=0), start_ts=1_000_000, end_ts=2_000_000)
• On-chain verification: confirmed — sncast get class-hash-at returned 0x0506d352f0c9efb8c4f0d91aa97d22743cd707967ed9d17f317c1d47d8de0eeb, matches declared class_hash
• Voyager source verification: ✅ Verified (Cairo 2.18.0, scarb 2.18.0) — job a0092763-b544-417d-ba2f-ea2346bc6951 returned status=4 "Verification successful" (see https://sepolia-api.voyager.online/beta/class-verify/job/a0092763-b544-417d-ba2f-ea2346bc6951)

TimelockRef — timelock_ref

• Contract address: 0x000cf34be47711061a23197e6f852437729e7b12975059f0bc53d2ef4a81e3f7
• Class hash: 0x02918236c2544f88406593dc1d10c9e85a0038cff4e0c9abfacd70f58083e526
• Declare tx: 0x024cab8ab14eac0978a1b02ec12a5027f92887be07c43522e55827a6898498f3
• Deploy tx: 0x0075ce3a2c09ed6fe4aae86b0597c0470c1dce44f5cff635e32be9cdce83515a
• Voyager (address): https://sepolia.voyager.online/contract/0x000cf34be47711061a23197e6f852437729e7b12975059f0bc53d2ef4a81e3f7
• Voyager (class): https://sepolia.voyager.online/class/0x02918236c2544f88406593dc1d10c9e85a0038cff4e0c9abfacd70f58083e526
• Constructor calldata: 0xAD 1000 (admin=0xAD, delay=1000 seconds)
• On-chain verification: confirmed — sncast get class-hash-at returned 0x02918236c2544f88406593dc1d10c9e85a0038cff4e0c9abfacd70f58083e526, matches declared class_hash
• Voyager source verification: ✅ Verified (Cairo 2.18.0, scarb 2.18.0) — job adddef30-aa72-4c32-ad88-bc9709bd8f5a returned status=4 "Verification successful" (see https://sepolia-api.voyager.online/beta/class-verify/job/adddef30-aa72-4c32-ad88-bc9709bd8f5a)

PaymentSplitterRef — payment_splitter_ref

• Contract address: 0x0193006b31e93d2607626d28f96d76d8bb5c94c485073a533e9b1fc9f929710c
• Class hash: 0x04517581d9af9b2a050aa67c7afe42fb1f8dfafc0e592a1410f69747232f71a7
• Declare tx: 0x054fd26e0bbc6d7b4658040da9d1c8ccf1a63f76185b88a1dca0373b4f1df0a3
• Deploy tx: 0x01e3b1f8c8cad2fd3ae76fbf4ca55b4c4913fe5abf3c0af913b3bb3acc61b676
• Voyager (address): https://sepolia.voyager.online/contract/0x0193006b31e93d2607626d28f96d76d8bb5c94c485073a533e9b1fc9f929710c
• Voyager (class): https://sepolia.voyager.online/class/0x04517581d9af9b2a050aa67c7afe42fb1f8dfafc0e592a1410f69747232f71a7
• Constructor calldata: 0xA1 0xB1 0xC1 50 30 20 (recipient_a=0xA1, recipient_b=0xB1, recipient_c=0xC1, shares 50/30/20 — total_shares=100)
• On-chain verification: confirmed — sncast get class-hash-at returned 0x04517581d9af9b2a050aa67c7afe42fb1f8dfafc0e592a1410f69747232f71a7, matches declared class_hash
• Voyager source verification: ✅ Verified (Cairo 2.18.0, scarb 2.18.0) — job f145d1cf-d5d4-4f06-8352-e0f3b0146421 returned status=4 "Verification successful" (see https://sepolia-api.voyager.online/beta/class-verify/job/f145d1cf-d5d4-4f06-8352-e0f3b0146421)

OracleRef — oracle_ref

• Contract address: 0x0617f50e2027fcc8addc91ea3f12ea15e60702af7dd46751ff6053c306a0e023
• Class hash: 0x0052efda3e990e248fd8fcd70a07c844b33b61628191eab362743593594134f7
• Declare tx: 0x06d9a048ad1ef0366cdd51ad178ad830dcf86c3fb6d38656bd459ddbfd1260ac
• Deploy tx: 0x047ceca61637c06cf7f7f231f1f06fa2d1843b4e423a06d84c44ced0409a113d
• Voyager (address): https://sepolia.voyager.online/contract/0x0617f50e2027fcc8addc91ea3f12ea15e60702af7dd46751ff6053c306a0e023
• Voyager (class): https://sepolia.voyager.online/class/0x0052efda3e990e248fd8fcd70a07c844b33b61628191eab362743593594134f7
• Constructor calldata: 0xBABE (publisher=0xBABE)
• On-chain verification: confirmed — sncast get class-hash-at returned 0x0052efda3e990e248fd8fcd70a07c844b33b61628191eab362743593594134f7, matches declared class_hash
• Voyager source verification: ✅ Verified (Cairo 2.18.0, scarb 2.18.0) — job 0105ce98-6604-49fa-8f6a-26808d6f6381 returned status=4 "Verification successful" (see https://sepolia-api.voyager.online/beta/class-verify/job/0105ce98-6604-49fa-8f6a-26808d6f6381)