Security & Verification

How to Verify Quote.Trade Contracts and the Withdrawal Path On-Chain

Use official contract addresses and network explorers to verify funding contracts, position contracts, token movements, role and snapshot activity, and any withdrawal transaction associated with your wallet. The June 25, 2026 public audit reviewed withdrawal controls but did not sample a live V5 withdrawal.

25 minutesIntermediateTraders, auditors, and due-diligence teams

What you will accomplish

  • Identify the current public contract addresses and their roles
  • Verify a token deposit or withdrawal on the correct explorer
  • Distinguish the funding contract from the position records
  • Document discrepancies without exposing wallet secrets

Before you begin

  • The wallet address used with Quote.Trade
  • The network and stablecoin involved
  • A transaction hash when verifying a completed transfer
  • The current Quote.Trade app, audit, and technical overview
V5 funding address0xE430d7906c3D3144223cF2b4d0d2eb16247d6881 on Ethereum and XDC
PositionManager0xf857aC7bed76B43c5457f56483803C4CebbD7eff on Polygon and XDC
V1 roleConstrained Ethereum fallback/hotwallet only
At the audit dateNo live V5 withdrawal was sampled
Step-by-step

Confirm the network, token, and contract from official sources

Start with the current Quote.Trade funding screen and the latest public audit. The June 2026 audit identifies V5 funding at 0xE430d7906c3D3144223cF2b4d0d2eb16247d6881 on Ethereum and XDC, the constrained Ethereum V1 fallback at 0x8815e8F0eb65E1072518e8F842C3aD5199DFCEF1, and the Polygon/XDC PositionManager at 0xf857aC7bed76B43c5457f56483803C4CebbD7eff. Use the live app if it lists a newer deployment.

Open the address in the matching explorer

Use Etherscan for Ethereum, XDCScan for XDC, and PolygonScan for Polygon. Compare the full address, not only the first and last characters. Review the contract name, source verification, token holdings, recent transactions, and role changes.

text
Ethereum V5 funding:
https://etherscan.io/address/0xE430d7906c3D3144223cF2b4d0d2eb16247d6881

XDC V5 funding:
https://xdcscan.com/address/0xE430d7906c3D3144223cF2b4d0d2eb16247d6881

Polygon position state:
https://polygonscan.com/address/0xf857aC7bed76B43c5457f56483803C4CebbD7eff

Verify the token contract and transfer details

For an actual user withdrawal, open the transaction hash and confirm status, block, timestamp, from address, registered destination wallet, token contract, decimals, and amount. If no real transaction hash is available, describe only the withdrawal control path—not a successful payout.

Distinguish the funding contract from the position layer

The funding contract holds supported stablecoins and releases approved withdrawals. PositionManager publishes position records and information used by the withdrawal checks; it does not transfer the stablecoin itself. A position snapshot is not proof that a stablecoin transfer occurred.

Review withdrawal controls and timing

The public V5 audit describes three position snapshots at least 22 hours apart before withdrawals, followed by a short cooldown. It also describes per-user and per-asset limits, replay protection, liquidity checks, and emergency controls. These rules can make the immediately withdrawable amount lower than the account balance.

Save the addresses and transaction details

Save the source URL and date, network, stablecoin contract, Quote.Trade contract, wallet, transaction hash, amount, block, status, and any relevant event names. For a discrepancy, contact support with this record. Never provide a seed phrase, private key, raw API secret, or wallet-signing request from an unknown source.

Troubleshooting

Common problems and fixes

The address shown in the app differs from an address recorded earlier

Stop and verify the current official address in the live app, latest audit, and applicable explorer before proceeding.

The explorer shows the transaction succeeded but the wallet does not display the token

Verify the token contract and network, then add the token contract to the wallet interface. The explorer balance is the stronger record.

The explorer labels the address as unverified

Source verification and deployment identity are separate questions. Review the latest audit and public behavior, and do not infer code equivalence from an address alone.

The position contract shows state but no stablecoin movement

That is expected: position publication is separate from funding custody and token-transfer settlement.

Primary sources

Ready for the next step?

Open the public audit

Open the public audit