Creators sell the logo spots on their outfit, car or team hoodie. Every spot is its own live auction in USDC. The money waits in escrow on Monad and reaches the creator only after they prove they showed up. Privy gives everyone a wallet with no seed phrase, no extension and no gas.
- Live: monad.patched.world. Monad testnet for play, and Monad mainnet with real Circle USDC on the same address.
- Track: 03, Social, Attention & Culture. Sponsor bounty: Privy.
- Traction (Oct 12, our own wallets left out): 20 real users, 14 listings by 6 creators, 24 bids from 6 brands, 10 proofs posted and $94 paid out to creators, all on testnet.
- Proven on-chain: the whole money loop ran as 25 transactions, and 134 contract tests pass, including fuzz and a solvency invariant.
For judges: try it in 3 minutes
Everything runs on Monad testnet with test money, so nothing you do can cost anyone anything.
- Sign in with one tap. Open monad.patched.world, press Sign in, then Use the demo account. You are a brand with your own wallet. No email, no seed phrase, no extension, no gas.
- Get test USDC if the wallet is low. The demo account is shared, so its balance can run out. Go to faucet.circle.com, pick Monad Testnet, paste your wallet address and claim. To copy it, tap your name at the bottom of the sidebar, then Add money → Copy my address. The balance updates by itself within seconds. You never need MON: gas is sponsored on testnet.
- Bid. Open any listing from Explore, tap a spot, press Bid. If Patched asks for a brand name, any name works. Then try Sweep (several spots at once) and Auto-bid (Patched bids for you up to a maximum).
- Get outbid on purpose. Open the same listing in a second browser, sign in with X or email and outbid yourself. The first wallet's USDC comes back in the same transaction, and both pages update within about 2 seconds.
- Look around. Home → Patchwork is the live graph of an event (press Replay). Any patch NFT at
/patch/<id> has Check against the chain, which verifies the proof itself. Automate has campaigns and "Patch anyone on X".
- Sell something. Press Create, upload any photo and publish. It goes live within seconds. Creating a listing locks a small test-USDC stake, so claim from the faucet first if needed.
- See the admin side. monad.patched.world/admin is open to anyone signed in on test money: review proofs, settle disputes, manage events.
The mainnet switch at the bottom of the sidebar uses real USDC, so stay on testnet to try things. Test USDC token: 0x534b2f3A21130d7a60830c2Df862319e593943A3.
The problem
It already happened. Before Token2049, vanshu.eth offered brands the logo spots on her event outfit. 13 spots sold, $9,200 came in within 48 hours, and her post reached 1.5M views. Then it nearly broke her:
- Her payments got rejected. Brands paying from abroad hit international transaction rejections at Razorpay.
- She had to build and run a whole website just to show the spots and take orders.
- Every price was fixed. A brand ready to pay more could not outbid anyone, so a spot went to whoever came first.
And it is spreading. Riri's copy of the outfit reached 321.9K views and her Token2049 post 739K. Abhist built a site for one T-shirt at Devcon. Akshita's Devcon Mumbai open call, front and back, reached 15K. Every one of them sells by DM, on hand-built sites, at fixed prices. Nobody built the tools.
| Their problem | What Patched does |
|---|
| Payments rejected | USDC, straight to a wallet. No bank, no card, no international transaction. |
| A whole website to run | A page at yourname.monad.patched.world, made for you in a minute. |
| Fixed prices, first come first served | Every spot is its own live auction, with a floor, a buy-now price and anti-snipe. |
| Brands paying before you deliver | Escrow. You are paid in steps, only after you post proof. If you don't show up, the brands are refunded. |
How it works
- A creator uploads a photo of their outfit, car or team hoodie. AI turns it into a clean canvas and places the logo spots. They can drag, resize and rename each one.
- They set the deal: part paid before the event for printing, the rest only after they prove they showed up. They lock a small stake that comes back when they deliver.
- Brands bid on each spot in a live auction, in USDC: +5% steps (at least +$5), a buy-now price, and a bid in the last 5 minutes adds 5 minutes. Outbid brands get their money back in the same transaction.
- Escrow holds the money in one market contract. The creator is paid in milestones, each only after posting proof. Brands have 72 hours to dispute a proof.
- Winning a spot mints a Living Patch NFT that updates on-chain as the creator delivers. The NFT is the spot: its holder gets the refund and the right to dispute.
flowchart LR
C[Creator<br/>photo, spots, deal] -->|publish + stake| M[(PatchedMarket<br/>escrow on Monad)]
B[Brand<br/>Privy wallet] -->|bid in USDC| M
M -->|outbid: refund in the same tx| B
M -->|win| N[Living Patch NFT]
C -->|proof to IPFS, hash on-chain| M
K[Keeper<br/>Privy server wallet] -->|close, release after review| M
M -->|milestone payout, minus 1%| C
M -.->|no-show: refund + stake| N
Traction
It is early, and we show only what we can count. Testnet numbers on Oct 12, from apps/web/scripts/metrics.mts, with our demo bots, test account and deployer, admin and keeper wallets left out:
| |
|---|
| Real users | 20 (11 signed in with X) |
| Listings | 14, by 6 creators: outfits, cars and team hoodies |
| Bids | 24, from 6 brands, $249 in total |
| Proofs posted | 10 |
| Paid out to creators | $94.21, in milestones, after proof |
| Campaigns and X offers | 2 campaigns, 1 offer to an X handle |
| Website | 85 visitors and 622 page views in a week, mostly from Instagram and X |
- Get Patched Week, our first community contest (Oct 8 to 12): 54 people opened the contest page, 10 joined, and 3 posted their own listings without being asked. The lucky draw is picked from a Monad block hash so anyone can check it, and the prizes are paid in real USDC on Monad mainnet. monad.patched.world/contest
- First mainnet creator lined up. Akshita, whose Devcon Mumbai sponsorship post reached 15K views, wants to be the first creator listed on Patched mainnet.
- Community: @Patched_world reached 3.4K impressions in a week from a 4-week-old account, and 27 early testers in our Telegram try every release on testnet and tell us what to fix.
- Privy's CEO noticed. Henri Stern asked what Privy could improve after we shared the build, and said Privy will look into three of our points (below).
Mainnet contracts are deployed with real USDC, but no real-money listing has run yet. Akshita's will be the first.
Team
| |
|---|
| Dhruv Pancholi, engineer | Builds Patched end to end: contracts, app, indexer, keeper. 10+ hackathon wins, incubator graduate. @dhruvpanch0li |
| Suhani Sharma, outreach | Brand and creator outreach. Network Analyst at Rogers, Canada. Presents the pitch. LinkedIn |
| Ananya Pancholi, creator | Runs social, with 70M+ views on Instagram. Brings creators from that network. Instagram |
Business model and getting users
1% of every sale, taken from each milestone payout when the creator is paid. On resale, the creator earns a 5% royalty. No token, no points, just USDC. Example: 6 spots sell for $1,200 at an event. Patched earns $12, and the creator gets $1,188 in steps as they post proof.
Creators first, because brands follow attention.
- Creators: Ananya's 70M-view network, and the creators already selling outfit space by hand (vanshu.eth, Riri, Abhist, Akshita). Every listing markets Patched: the creator shares their own page, poster and QR code on X.
- Brands: Suhani pitches the teams already sponsoring events, then token projects and memecoin communities (they want to be seen at every event and already hold USDC), then web3 startups launching at hackathons. Spots start at $10.
- Brands recruit creators through "Patch anyone on X": an offer to a handle, shared on X, that the creator claims by signing in.
- Next: ETHGlobal Mumbai (Nov 5 to 7, about 800 builders). Hacker teams list their team hoodie from a printed QR code in under 2 minutes, brands bid live, and payouts land as proofs come in, so the whole loop completes at the event. Then Devcon Mumbai, with Akshita on mainnet.
- Goal by ETHGlobal Mumbai: 50 creators, 20 brands, $5,000 in bids.
The full plan, competition and roadmap: docs/context/07-gtm-and-future.md.
Three surfaces
| Surface | What | Proof |
|---|
| Outfit | A person at an event (for example Token2049) | Print photo, venue photos, an X post |
| Vehicle | A car, van or bus for 1 to 3 event days, parked at the venue or looping it | Dated, located photos each day, an X post |
| Team hoodie | A team at a hackathon, paid out across the team | Team check-in, stage or demo photos, an X post |
| Your own idea | Anything people will see at the event: a laptop lid on stage, a booth wall, a board | Photos with the logo in view, an X post |
Product map
| Surface | What it does |
|---|
| Home | A feed of new listings, bids ("Nike unseated Kite and took Chest"), proofs and spotted photos, with likes and comments. Switch to Patchwork for the live graph of an event. |
| Creator page | yourname.monad.patched.world: the creator's own site with the photo, live spots and bids. Editable in place, with a share kit and link previews. |
| Create | Photo → AI canvas → AI-placed spots → the deal (payout split, proof dates fitted to the event) → publish. Live within seconds. |
| Listing | Every spot is its own auction: one-tap bid, buy now, sweep, auto-bid, anti-snipe, instant outbid refunds, comments. |
| Automate | Auto-bid (Patched as a policy-limited signer), campaigns (a budget Privy enforces), and "Patch anyone on X". |
| Events | Cover, who's going, leaderboards, a live wall of bids, Spotted photos and Patchwork. |
| Patch NFTs | /patch/<id>: the living card, its timeline with explorer links, a proof check, and resale. |
| Profile | Listings, Collection, Sponsors, and (for you) Campaigns, Earnings and Bids. |
| Contest | Get Patched Week: steps checked live, entries, and a lucky draw picked by a block hash. |
| Admin | Reports, proofs and disputes, events. Open to anyone on play money, through a policy-limited wallet. |
Why Monad
- A live auction needs a live chain. A bid confirms in about a second, so prices, leaders and patches move on screen while brands watch, and anti-snipe extensions are fair to the second.
- Small payments make sense. Spots start at $10, refunds happen on every outbid, and creators are paid in several milestones. That only works when each transaction costs a fraction of a cent.
- Native USDC. Circle USDC on mainnet and Monad's test USDC on testnet, so every price, bid and payout is in dollars with no bridging.
- Built around Monad's RPC. Our indexer reads contract logs in 1,000-block windows, the RPC's
eth_getLogs limit, and notifications are unique per event, wallet and kind, so replaying blocks never duplicates anything.
- EIP-7702 on Monad. Privy's gas sponsorship gives embedded wallets a 7702 delegation, and USDC then checks permits through ERC-1271, which rejects a plain permit signature. We found this the hard way, so Privy wallets approve then bid, and permits are used only for plain outside wallets (permit.ts).
How Patched uses Privy
Privy is how nobody has to know they are using a wallet. Every wallet, signature and payment on Patched goes through it, and every key we own sits behind a Privy policy.
| What users get | The Privy piece | Code |
|---|
| Sign in with X or email, no seed phrase | Embedded wallets with our own sign-in card | WelcomeView.tsx |
| Bid in one tap: no pop-up, no gas | Gas sponsorship | useBid.ts |
| Auctions close, pay and refund on time | Keeper server wallet with a 4-call policy | keeper.ts |
| "Keep me on top up to $40" | Signers with a policy, revocable in one tap | useAutoBid.ts |
| "Spend up to $300 at Token2049" | Campaign wallets with a Privy-checked budget | campaigns.ts |
| Offer money to any X handle, before they sign up | Pregenerated wallets | xOffers.ts |
| Passkey for big bids, verified brands, wallet export | MFA, linked accounts | stepUp.ts |
| Judges try it in one tap | Test account and a policy-limited admin wallet | demoAccount.ts |
Watch it: how Patched uses Privy, beyond login (1:48), with each feature shown as it runs in the app.
Read it: No bank, no seed phrase, no gas: how Privy runs every dollar on Patched.world (our write-up on Medium, with 1.4K views on X).
Every feature, with the problem, the lesson and the on-chain proof: docs/privy.md.
What we told Privy
After we shared the build, Privy co-founder and CEO Henri Stern asked what Privy could improve (thread). We sent what cost us time:
- The one that cost the most: once gas sponsorship was on, USDC permits stopped working for Privy wallets. The cause was the EIP-7702 delegation sponsorship adds: USDC then checks the permit through ERC-1271 and rejects it. We switched Privy wallets to approve then bid.
- Gas credits paid in USDC, not only by card.
- "Ask for the passkey only on big amounts" as a simple switch (conditional MFA).
- Webhooks without the enterprise plan, so small teams don't have to build their own indexer.
- A dev channel for quick questions.
Henri replied that Privy will look into USDC funding for sponsorship, the 7702 feedback and conditional MFA, and invited us to Privy's dev Slack.
The patch NFT that grows up
Winning a spot mints a Living Patch, drawn as an embroidered patch on dark cloth with the brand's logo and the price. Its state lives on-chain, and the card redraws as the creator proves each step: a thread is sewn one knot further, ink stamps land for printed and seen, and a DELIVERED stamp lands when the run is done. It is the spot: its holder gets the refund and the right to dispute. The contract also draws its own picture on-chain (image_onchain).
- Sponsor numbers. "No.001, first sponsor of @mira": a public record of which brand backed which creator first.
- Verifiable proofs. Proof photos and the proof record are pinned to IPFS, and the hash in the contract is the hash of that record. Every patch has a page at
/patch/<token> with a timeline and a button that fetches the proof, hashes it in your browser and compares it with the chain.
- Resale with a royalty. A patch can be resold on Patched while the creator is delivering; 5% goes to the creator. Tokens cannot move any other way.
- The patch's thread border and the light on the cloth show the price: white cotton thread under $100, iridescent silk to $999, gold from $1,000. Each listing's patches come in five shapes, and outfits, cars and team hoodies each get their own faint sewing pattern behind the patch. Design and plan: docs/nft-plan.md.
Verify it yourself
One full cycle ran on Monad testnet on 2026-10-02, with the Privy test account as the brand. Every step is on the
explorer; docs/evidence.md has all 25 transactions.
| What | Privy feature | Transaction |
|---|
| A brand bids from a Privy wallet: no prompt, no gas | Embedded wallet, gas sponsorship | 0x77d837d6… |
| A rival outbids; the brand is refunded in the same transaction | | 0x419332c5… |
| Auto-bid answers within seconds, from the brand's own wallet | Signer with a policy (key quorum) | 0x28e3a8c5… |
| Two spots in one sweep, all or nothing | Sponsored gas | 0x0584ad7a… |
| A campaign bids for the brand; Privy refuses the bid that would pass the $10 budget | Server wallet, policy, aggregation | 0x2a5d3397… |
| A brand offers $5 to an X handle; the money waits in its own wallet | Pregenerated wallets, policy | 0x6172ae36… |
| A listing approved by a non-admin through open admin | Policy-limited server wallet | 0x11a6f46c… |
| The keeper closes bidding 8 seconds after it ends | Keeper server wallet, policy | 0x2d1eb116… |
|
Re-run it: apps/web/scripts/onchain-cycle.mts (creator, admin and rival steps) and apps/web/scripts/browser-steps.mjs
(the brand, in a browser, as the Privy test account).
What is verified, and what isn't
We would rather you trust the parts we can prove.
| Claim | Status |
|---|
| The full money loop works on-chain | Verified on testnet: 25 transactions in docs/evidence.md |
| Mainnet contracts on real USDC | Deployed 2026-10-08 (addresses below). Not yet verified on a block explorer. No real-money listing yet; the first creator is lined up |
| Privy policies refuse anything outside them | Checked by scripts in apps/web/scripts/privy-*-check against the live policies |
| Contract safety | 134 tests (unit, fuzz, solvency invariant, timing, upgrade). No independent audit. Owner, admin and treasury are one deployer key today; a multisig comes before real volume |
| Gas sponsorship | On for testnet. On mainnet, wallets pay their own MON until sponsorship is switched on |
| Traction | Testnet numbers on Oct 12, with our own wallets left out (apps/web/scripts/metrics.mts). Testnet USDC has no value, so bids are a usage signal, not revenue |
Open admin and the demo account exist for judging and only work on play money.
Features
- AI canvas. Upload a photo and AI turns the outfit, car or hoodie into a clean white canvas, with the background removed.
- AI outfit looks. AI suggests outfit styles from your photo and generates front and back model shots in the style you pick.
- AI car views. Upload one photo of your car and AI generates the other sides (front, left, right, back, roof), so brands can bid on every panel.
- AI spot suggestions. AI proposes where the patches should go. You can drag, resize and rename every spot yourself.
- Your terms. For each spot, set a starting price, a buy-now price and a tier (mini, prime or mega). Pick the event.
- Your deal. Choose how you get paid: part before the event for printing (10% to 50%), all after, per event day, or a custom split of up to 4 steps. A live payout bar shows the split and the proof date of each step. Pick what every brand gets (photos, parked hours, route check-ins, an X post); brands see it before they bid.
- Stake. You lock a small bond when you publish. It comes back when you deliver.
- Editable sponsor page. Edit your listing page in place: headline, intro, perks per spot, section titles, accent colour, and which sections are shown. The FAQ is editable too.
- Your own background. Put a colour or a picture behind your photo, on your page and in the feed. Set it when you publish, change it any time with Edit page → Background.
- Share kit. A poster maker with templates, a QR code and downloadable images. Every listing also gets its own link preview image for X and chats.
- Creator studio. Close bidding, see the winners, upload proof for each milestone and release your payments.
- One profile.
/<handle> shows your listings, the spots you sponsor and your record. As the owner you also get your Earnings (what needs doing, payouts) and Bids tabs there, so there's no separate dashboard to find.
- One-tap bidding. Tap a spot on the photo and a bubble shows the price, who leads and the last few bids. One button bids the minimum to take the lead. Quick chips add +$5, +$10 or buy it now.
- Full bid sheet. Enter a custom amount or buy the spot outright.
- Auto-bid. "Keep me on top up to $X." When you're outbid, Patched bids the next step for you within seconds, and never above your maximum. It shows "Paused" and tells you what to fix if your wallet runs out of USDC or of spending permission.
- Sweep. Pick several spots and bid on all of them in one tap. Either every bid lands or none do.
- Instant refunds. When you're outbid, your USDC comes straight back in the same transaction.
- One-tap rebid. The outbid toast has a "Bid $X" button that bids the new minimum in one tap.
- Verified brand badge. Link your work email. If its domain matches your website, your bids and patches show "Verified brand".
- Brand profile. Your brand name and logo appear on the patches you lead.
- Campaigns. "Spend up to $300 at Token2049, never more than $40 a spot, until the event ends." A campaign wallet bids across the event for you, cheapest spots first (or prime spots only), and returns what's left at the end. Its rules are a Privy policy you can read in plain words or as JSON, and Privy itself keeps the running total within the budget.
- Patch anyone on X. Offer money to any X account for a spot at an event, even if they've never used Patched. Privy creates their account and wallet on the spot; the offer waits in its own policy-limited wallet, can pay their listing stake if their wallet is empty, and buys their spot when they list. Share the offer on X in one tap.
- Bids tab. Spots you lead, spots where you were outbid, your receipts, and resale, on your profile.
- Every spot is its own auction, with a starting price, a buy-now price and a minimum step of +5% (at least +$5).
- Anti-snipe: a bid in the last 5 minutes adds 5 minutes to the whole listing, and everyone on the page is told.
- Live updates within about 2 seconds: prices, leaders and patches move on screen as bids land.
- "N watching now" through Supabase Realtime presence.
- Bidding war labels when brands trade the lead, plus recent activity on each spot.
- A live activity feed on every listing, and a live ticker on the landing page.
- Paid only on proof. Money is released in milestones (for example 40% after the print proof and 60% after the show-up proof), each only after proof is posted.
- 72-hour disputes. Each patch holder can dispute a proof for their own patch within 72 hours. An admin settles it, and can split the payment between creator and brand.
- No-shows are refunded. If a creator misses a proof deadline, the unpaid escrow and the creator's stake go to the patch holders.
- Creator record. On-chain delivered and missed counts plus total earned, shown on every listing next to the stake and the payout plan.
- Safe onboarding. New creators have a spending cap until their first delivery, and every new listing goes live within seconds through a policy-limited Privy wallet that can only approve listings.
- Living patch NFTs. Winning a spot mints an NFT drawn on-chain as an embroidered patch on dark cloth. It updates itself as the creator proves each step (won, printed, seen, delivered), goes grey with the patch unpicked if the creator fails, and shows hazard tape while a dispute is open. It is the spot: its holder gets refunds and dispute rights. Each one has a public page at
/patch/<token> with a timeline and a check that hashes the proof from IPFS and compares it with the hash on-chain.
- Resale. A receipt can be listed, bought or delisted on Patched, with a 5% royalty to the creator. Receipts can't move outside the market, so the royalty always applies.
- Fallback payouts. If a payment to a wallet ever fails, the money waits in the contract and the owner withdraws it. The market can be paused in an emergency.
- Comments. Free, one line each, on the whole listing or about one spot. The author and the creator can remove one, and the creator is told.
- Patchwork. Home switches between the feed and a living graph of an event: creators, their spots, the brands leading them and the people who spotted them, all connected by what happened on-chain. Replay plays an event back in about 20 seconds.
- Home feed. Signed in,
/ is a feed of new listings, bids ("Nike unseated Kite and took Chest on Dhruv · $120", with Outbid) and proofs, with upcoming events, what's ending soon and search alongside.
- Explore board. Live listings with search, surface filters, bid counts and a live activity feed.
- Events.
/events lists every event with its cover. /e/<slug> has the cover, venue and links, who's going, leaderboards (most sponsored, brand on the most spots, biggest bidding war), every spot and a live wall of bids. Admins edit the cover and details.
- Notifications. A live bell and a full
/notifications page for outbid, new bid, auto-bid placed or paused, won, listing live or rejected, bidding closed, proof posted, dispute opened, payment made, no-show refund and resale sold.
- An app shell like X. A slim sidebar (Home, Events, Explore, Activity, Profile and Create) that never reloads. Once signed in, Automate, Campaigns and Earnings sit under it. Your name and dollar balance sit at the bottom; tapping it opens the wallet: Add money, My bids, Settings, theme, network and sign out.
- Car pages are a road scene. The car sits large on a moving road, with the spots of the side you are looking at beside it, so you can bid without scrolling. Car cards in the feed sit on the same road.
- Printed, not boxed. When bidding ends, winning brands are printed into the photo: their logo is cut out of its box and blended into the fabric.
- Phone navigation: bottom tabs (Home, Events, Create, Activity, Profile) and your avatar at the top for the wallet.
- A creator's page stands alone. A listing page is the creator's own site with only a small "Made with Patched" mark, so sharing it on X feels like sharing a site they built.
- Welcome. New visitors sign in on a page that plays the whole story (sign in, draw spots, brands bid, show up, get paid) across outfits, vehicles and team hoodies, then pick a name, a handle (checked live) and whether they sell spots, sponsor or both.
- Settings (
/settings): profile, brand (name, logo, website, verified badge), security (passkey, wallet export) and network, in one place.
- Listing tools: a creator's listing page, Manage screen and Share kit are tabs of one bar.
- Testnet and mainnet, one address: a switch at the bottom of the sidebar (and in the wallet panel and Settings) moves
monad.patched.world between Monad testnet and Monad mainnet. The address stays the same; only the chain changes. Going to mainnet first says it uses real USDC.
- Create follows the event: pick an event and the bidding time fits itself to it, with the event's dates shown and one timeline from bidding to the last proof.
- Empty wallet, clear steps: a bid, sweep, auto-bid, stake or campaign that needs more than the wallet holds opens Add money with what's missing and the faucet steps, address included.
- Reported listings and spotted photos: hide or restore them. Three different reporters hide a post at once.
- Review proofs, fast-track milestones and settle disputes.
- Create events, and give each one a cover, venue, city, description and links.
- Keeper. A policy-limited Privy server wallet closes auctions when they end, releases payments after the review window, marks no-shows and runs auto-bids. It also runs campaigns. Every send carries an idempotency key, so a retry never acts twice.
- Indexer. Syncs every contract event into Supabase: bids, patches, receipts, payouts and notifications. It's rate-limited when called from the app.
- Server-side AI. All AI runs on the server through OpenRouter, with the cheapest model that does each job.
- Themes and motion. Light and dark themes. Every animation respects reduced-motion settings.
- USDC only. No banks or fiat anywhere: wallets hold USDC. Mainnet runs on real USDC; testnet uses test USDC.
Engineering
The hard part is money moving between people who don't trust each other, through wallets they never see. Every boundary has an explicit check.
- Escrow you can reason about. All USDC sits in one market contract. Outbid refunds happen in the same transaction (or are credited for withdrawal if a push fails). A solvency invariant test checks the contract always holds what it owes. Anti-snipe is capped by a hard end, deadlines shift if late bids squeeze the first proof, a pause never costs a creator their deadline, and a dispute nobody settles splits 50/50 after 30 days.
- Proof you can recheck. Proof photos and a proof record go to IPFS; the contract stores
keccak256 of the record. Each patch page fetches it, hashes it in the browser and compares it with the chain.
- Keys we hold can only do one job. The keeper, the approver, open admin, every campaign and every X offer is its own Privy server wallet, owned by our authorization key and limited by a policy to a few named contract calls. Anything else is refused by Privy with
policy_violation (checked by script).
- Automation that can't overspend. Auto-bid runs from the brand's own wallet through a Privy signer whose policy names the spot and the maximum; raising it needs the brand to approve a new policy. Campaign budgets are a Privy aggregation, so Privy, not our server, refuses the bid that would pass the budget.
- Retries that can't pay twice. Every keeper and campaign send carries an idempotency key that describes the situation (action, listing, milestone, the top bid it answers), namespaced per chain.
- A server that never trusts the browser's wallet. Every acting API route verifies the Privy access token; money routes read the wallet and verified emails from Privy itself. Rate limits on every write, moderation on everything public.
- An index that can be replayed. The indexer reads every contract event into Postgres; notifications are unique per event, wallet and kind, so replaying blocks never duplicates anything. A cron keeps the keeper and index moving every minute.
- Two chains, one codebase. Chain values live in config; testnet and mainnet are two builds of the same code behind one address. Demo shortcuts switch off by themselves on real money.
Contracts
| Contract | What it does |
|---|
PatchedMarket | Listings, per-patch auctions with anti-snipe, permit bids, escrow, milestones, proofs, disputes, no-show refunds, creator stakes and records, events, resale with royalties. Upgradeable proxy. |
PatchReceipt | The Living Patch NFT for each won patch, with ERC-2981 royalties and ERC-4906 refresh events. It only moves through the market. |
PatchRenderer | Draws each NFT's SVG and metadata from the market's state. Swappable, so the art can be fixed without touching a token. |
PatchAutoBidder | Holds each brand's auto-bid maximum and bids for them. It never goes above the maximum. |
PatchSweeper | Bids on several patches in one transaction, all or nothing. |
The new mainnet contracts (real USDC, deployed 2026-10-08) are not verified on a block explorer yet. Testnet uses Monad's test USDC. The earlier testnet market (v2, not upgradeable) was 0xd3808dE425493934f036f8E77ef5a4de332e9552. Details: docs/contracts.md.
Tech stack
- Contracts: Solidity 0.8.28, Foundry, OpenZeppelin v5.4, with unit, fuzz and invariant tests (134 passing).
- Web: Next.js (App Router), React 19, Tailwind CSS v4, Motion, NumberFlow, viem, Privy.
- Data: Supabase (Postgres, Storage, Realtime), with our own indexer in
packages/indexer.
- Storage: proofs and photos on IPFS through QuickNode.
- AI: OpenRouter, through
packages/ai, server side only.
- Chain: Monad testnet (10143) and Monad mainnet (143). Chain values live in config.
brandboard/
├─ contracts/ Foundry contracts and tests
├─ packages/shared/ ABIs, types, chain config and addresses
├─ packages/ai/ OpenRouter client and prompts
├─ packages/indexer/ Chain events → Supabase
├─ apps/web/ Next.js app
├─ supabase/ Database migrations
└─ docs/ Spec, contracts, design system, plans and evidence
Run it
pnpm install
pnpm contracts:setup
pnpm contracts:test
cp .env.example .env.local # then fill in the values
pnpm web:dev # the app on Monad testnet
pnpm web:dev:mainnet # the app on Monad mainnet, http://localhost:3200
pnpm --filter web test:ui runs Playwright against the dev server (start it first with pnpm web:dev), in the
Chrome installed on the machine, on a laptop size and a phone size:
- Every page (pages.spec.ts): it loads, nothing scrolls sideways, no broken
images, every button and link has a name, and nothing crashes or logs an error. Every internal link on the main
pages opens. Each page is also saved as a screenshot in
apps/web/e2e/screens/ for a visual review.
- What people click (flows.spec.ts): sign-in, the app's navigation, the Studio
deal, the campaign builder and its Privy policy, a listing, an event, Explore search and profile tabs.
- Signed in (signed-in.spec.ts): runs when
E2E_TEST_EMAIL and
E2E_TEST_CODE hold a Privy test account.
The report is in apps/web/e2e/report/ (npx playwright show-report e2e/report from apps/web).
Built during the hackathon
Patched was built for Monad Metropolis: 295 commits between Sep 23 and Oct 13, 2026. The testnet contracts were deployed and upgraded during the hackathon, and the mainnet contracts on Oct 8. Every step of the money loop is in docs/evidence.md, with explorer links.
Documentation
| Document | What it covers |
|---|
| Project context | The whole project in one place: product, Privy, contracts, infrastructure, Patchwork, community, go-to-market, roadmap |
| Privy in detail | Every Privy feature we use, with the code for each |
| Contracts | The full contract API, events, errors, upgrades and deployments |
| On-chain evidence | Every transaction of the test cycle |
| Patchwork | The live on-chain graph of an event |
| Patch NFT | The Living Patch card and how it changes |
| Design system | Colours, type, motion and components |
| Data model | The database tables |
| Security | How to report a problem |
| Agent guide | How AI agents work in this repo |
X @Patched_world · Telegram · monad.patched.world
AI tools disclosure
Built with AI. Claude Code (Anthropic, Claude models) was the main coding tool for this repository. It wrote and reviewed the contracts, tests, web app, indexer, scripts and docs, under Dhruv Pancholi's direction. Dhruv reviewed the work and ran the tests. Antigravity also worked on parts of the web app, on tasks assigned in docs/requests.md. Most commits carry a Co-Authored-By: Claude line. The contracts were deployed from our own wallet after review and tests.
Inside the product. AI runs only on the server, through OpenRouter, using the cheapest model that does each job well:
- Clean canvas: turns a photo of an outfit, car or hoodie into a clean white canvas.
- Spot placement: suggests where the logo spots go, and checks them.
- Outfit styles and model shots: suggests styles from a photo and makes front and back shots.
- Car views: describes a car from one photo and generates the other sides.
- Event covers: generates a cover image for an event page.
AI never moves money, signs transactions or decides payouts or disputes. The contracts and Privy policies do that.
