Security & Verification

How to Verify Quote.Trade Contracts and the Withdrawal Path On-Chain

Use official contract addresses and network explorers to verify funding contracts, position contracts, token movements, role and snapshot activity, and any withdrawal transaction associated with your wallet. The August 20, 2026 V6 public audit reviews the deployed V6 address posture and withdrawal-control design.

25 minutesIntermediateTraders, auditors, and due-diligence teams

What you will accomplish

  • Identify the current public contract addresses and their roles
  • Verify a token deposit or withdrawal on the correct explorer
  • Distinguish the funding contract from the position records
  • Document discrepancies without exposing wallet secrets

Before you begin

  • The wallet address used with Quote.Trade
  • The network and stablecoin involved
  • A transaction hash when verifying a completed transfer
  • The current Quote.Trade app, audit, and technical overview
V6 funding core0xfb41c4f731a064fb3911d16d529be0c2958d5fc6 on Ethereum and XDC
V6 views contract0x228d706e0651038dd8ec151e2f639b3e47ffecb6 on Ethereum and XDC
PositionManager0xf857aC7bed76B43c5457f56483803C4CebbD7eff on Polygon and XDC
V1 roleConstrained Ethereum fallback/hotwallet only
Step-by-step

Confirm the network, token, and contract from official sources

Start with the current Quote.Trade funding screen and the latest public audit. The August 2026 V6 audit identifies FundingContractV6 core at 0xfb41c4f731a064fb3911d16d529be0c2958d5fc6 on Ethereum and XDC, FundingContractV6Views at 0x228d706e0651038dd8ec151e2f639b3e47ffecb6 on Ethereum and XDC, the constrained Ethereum V1 fallback at 0x8815e8F0eb65E1072518e8F842C3aD5199DFCEF1, and the Polygon/XDC PositionManager at 0xf857aC7bed76B43c5457f56483803C4CebbD7eff. Use the live app if it lists a newer deployment.

Open the address in the matching explorer

Use Etherscan for Ethereum, XDCScan for XDC, and PolygonScan for Polygon. Compare the full address, not only the first and last characters. Review the contract name, source verification, token holdings, recent transactions, and role changes.

text
Ethereum V6 funding core:
https://etherscan.io/address/0xfb41c4f731a064fb3911d16d529be0c2958d5fc6

Ethereum V6 views:
https://etherscan.io/address/0x228d706e0651038dd8ec151e2f639b3e47ffecb6

XDC V6 funding core:
https://xdcscan.com/address/0xfb41c4f731a064fb3911d16d529be0c2958d5fc6

XDC V6 views:
https://xdcscan.com/address/0x228d706e0651038dd8ec151e2f639b3e47ffecb6

Polygon position state:
https://polygonscan.com/address/0xf857aC7bed76B43c5457f56483803C4CebbD7eff

Verify the token contract and transfer details

For an actual user withdrawal, open the transaction hash and confirm status, block, timestamp, from address, registered destination wallet, token contract, decimals, and amount. If no real transaction hash is available, describe only the withdrawal control path—not a successful payout.

Distinguish the funding contract from the position layer

The funding contract holds supported stablecoins and releases approved withdrawals. PositionManager publishes position records and information used by the withdrawal checks; it does not transfer the stablecoin itself. A position snapshot is not proof that a stablecoin transfer occurred.

Review withdrawal controls and timing

The public V6 audit describes withdrawal controls, rate limits, emergency controls, deployed V6 address posture, per-user and per-asset limits, replay protection, and liquidity checks. These rules can make the immediately withdrawable amount lower than the account balance.

Save the addresses and transaction details

Save the source URL and date, network, stablecoin contract, Quote.Trade contract, wallet, transaction hash, amount, block, status, and any relevant event names. For a discrepancy, contact support with this record. Never provide a seed phrase, private key, raw API secret, or wallet-signing request from an unknown source.

Troubleshooting

Common problems and fixes

The address shown in the app differs from an address recorded earlier

Stop and verify the current official address in the live app, latest audit, and applicable explorer before proceeding.

The explorer shows the transaction succeeded but the wallet does not display the token

Verify the token contract and network, then add the token contract to the wallet interface. The explorer balance is the stronger record.

The explorer labels the address as unverified

Source verification and deployment identity are separate questions. Review the latest audit and public behavior, and do not infer code equivalence from an address alone.

The position contract shows state but no stablecoin movement

That is expected: position publication is separate from funding custody and token-transfer settlement.

Primary sources

Ready for the next step?

Open the public audit

Open the public audit