Sablewing Marketplace

Signature-based NFT marketplace with royalties.

Sellers sign EIP-712 orders off-chain; buyers fill them on-chain. The exchange enforces creator royalties and supports collection-wide offers and order cancellation by nonce.

Ecosystem: Base
Category: NFT Marketplace
Languages: Solidity
Launched: Oct 2025

77.3BBBModerate risk

Grade BBB · Moderate risk

Adequate posture with notable weaknesses in one or more areas.

+0.4 since Nov 2025 · ±0.0 since Jul 2026

Quantix Protocol Research · as of 24 Oct 2026 · About this data

Risk Index

How the score is built

Six weighted components, each scored 0–100 where higher means less risk. Points are the component value multiplied by its weight; the gap is what the component costs against a perfect score.

Component	Weight	Value	Points	Gap
Code Security	30%	78	23.4	−6.6
Operational Security	20%	76	15.2	−4.8
Governance Risk	15%	78	11.7	−3.3
Economic Security	15%	76	11.4	−3.6
Infrastructure Resilience	10%	76	7.6	−2.4
Transparency	10%	80	8.0	−2.0
Quantix Risk Index	100%		77.3	−22.7

Risk Index components: Sablewing Marketplace Code 78, Operational 76, Governance 78, Economic 76, Infrastructure 76, Transparency 80
Component	Sablewing Marketplace
Code	78
Operational	76
Governance	78
Economic	76
Infrastructure	76
Transparency	80

Grade scale

AAA90–100
AA85–89.9
A80–84.9
BBB75–79.9
BB70–74.9
B65–69.9
CCC60–64.9
CC55–59.9
C50–54.9
D0–49.9

Score history

12 monthly snapshots

Each point is the Risk Index computed from that month’s component values. Markers below the chart show the events that moved a component.

Sablewing Marketplace Quantix Risk Index by month
Period	Quantix Risk Index
Nov ’25	76.9
Dec ’25	76.9
Jan ’26	76.9
Feb ’26	76.9
Mar ’26	77.3
Apr ’26	77.3
May ’26	77.3
Jun ’26	77.3
Jul ’26	77.3
Aug ’26	77.3
Sep ’26	77.3
Oct ’26	77.3

30 Mar 2026
Operations
Bulk cancellation released
Users can invalidate all open orders at once.
- Operational Security+2

Risk factors

What keeps the score from being higher, most severe first.

MediumOperational SecurityProfile analysis
Off-chain signature phishing
Malicious sites can request listing signatures that sell NFTs for nothing.
LowCode SecurityProfile analysis
Cached domain separator
After a chain split, signatures could be valid on both forks.

Recommendations

Each recommendation raises one component to a target value. The score effect is recomputed with the Risk Index model, holding every other component fixed.

Code Security: 78 → 82
Re-derive the domain separator on chain-ID change
Compute it on demand when block.chainid differs from deployment.
+1.2
→ 78.5
Operational Security: 76 → 80
Signature-preview tooling
Publish decoded order previews for wallets.
+0.8
→ 78.1

Analysis

Contract, governance and operations

Contract analysis

Source: Verified
Upgradeability: Immutable exchange; royalty registry upgradeable
Administrative control: Sablewing multisig (3-of-5)
Enforced delay: None identified
External dependencies: Royalty registry; Off-chain order book

PassEIP-712 orders. Orders bind chain ID and the exchange address.
PassNonce cancellation. Bulk cancellation by incrementing a nonce.
CautionDomain separator caching. Domain separator cached at deployment without fork re-derivation.

Governance exposure

Low

Exchange logic is immutable; the multisig controls only the royalty registry.

Operational resilience

Adequate

Users are frequent targets of approval and listing-signature phishing.

Monitoring

Monitoring history

2 recorded security events for Sablewing Marketplace, most recent first.

Open in Security Monitoring

19 Aug 2026InformationalBulk order cancellations at 2.2× the usual rateContract Activity · NonceManagerResolved
30 Jul 2026MediumOrder fills at 4.3× the 30-day medianContract Activity · ExchangeResolved

Research assessment

No Quantix assessment of Sablewing Marketplace has been published. Its security findings are represented by the contract-analysis signals above: 0 failed and 1 cautionary.