Docs
Technical documentation, guidelines, and protocol specifications for Medialane.
Security
Security is foundational to the Integrity Web. Medialane and the underlying Mediolano protocol employ rigorous testing, formal verification, and continuous monitoring to safeguard user assets and IP records.
Defense-in-Depth Strategy
The Mediolano protocol — the IP protection and licensing layer that Medialane is built upon — adopts a layered security approach across every component:
Formal Verification
Core Cairo contracts are formally verified where applicable to prove correctness at the mathematical level.
Peer Review
Every code change to protocol contracts and the platform undergoes peer review before deployment.
Timelock Controllers
Governance actions that affect protocol parameters are subject to timelocked execution, giving the community time to respond.
Immutable Core Contracts
Core protocol contracts are immutable to prevent unauthorized upgrades — no single party can change the rules unilaterally.
Audit Reports
Core Protocol Audit — Mediolano
CompletedAudited by the core development team · October 2025
Covers the Marketplace contract, Collection Registry factory, IP NFT standard, SNIP-12 order signing, and royalty distribution logic.
POP Protocol & Collection Drop Audit
In progressThird-party audit of the POP Protocol factory and Collection Drop contracts is scheduled as these contracts approach stable release.
Decentralized Storage
All IP asset media and metadata are stored on IPFS — a decentralized content-addressed storage network. A hash of every metadata JSON is committed to the Starknet blockchain inside the token URI, creating an immutable link between the on-chain record and the off-chain content.
This means your IP proof is not dependent on Medialane's servers continuing to operate. The record exists on the Starknet blockchain and IPFS permanently, independent of the platform.
Real-Time Monitoring
The Medialane infrastructure uses real-time on-chain monitoring to detect anomalies and suspicious transaction patterns — including unusual order volumes, contract call anomalies, and potential flash-loan attack vectors. Alerts allow for rapid response to potential threats before they can escalate.
Risk Disclosure
Important Notice
Smart contracts carry inherent risks. While the Mediolano protocol and Medialane platform take every precaution — including audits, formal verification, and continuous testing — user funds and IP assets could theoretically be at risk due to unforeseen bugs in the protocol or the underlying Starknet network. Use caution and only commit assets whose loss you could tolerate.
Medialane does not take custody of your assets. Your NFTs remain in your self-custodied wallet at all times. Marketplace orders are signed intents — your asset does not leave your wallet until a transaction is fully executed and settled on Starknet.
Responsible Disclosure
If you discover a security vulnerability in the Medialane platform or the Mediolano protocol, please report it responsibly to security@medialane.io. Do not disclose vulnerabilities publicly before giving the team a reasonable opportunity to investigate and remediate.