A secure escrow smart contract for creator-driven commerce with integrated Kairo AI Sec security auditing and REST API.

This contract enables a simplified three-party escrow system:

• Consumer deposits the purchase price → goes to Store
• Store deposits creator commission → goes to Influencer
• Funds automatically release when both parties fund

✅ Simple API - JSON endpoint to create escrow deals
✅ Auto-Release - Funds release automatically when both parties fund
✅ Kairo Security - Automatic security analysis before deployment
✅ Error Logging - All errors logged to errors file
✅ CI/CD Ready - GitHub Actions integration

npm install

Create .env file:

KAIRO_API_KEY=kairo_sk_live_xxxxx
ESCROW_ADDRESS=0x...  # Set after deployment

npx hardhat compile
npx hardhat test

# Terminal 1: Start local blockchain
npx hardhat node

# Terminal 2: Deploy
npx hardhat run scripts/deploy.js --network localhost
# Copy Escrow address to .env as ESCROW_ADDRESS

npm run api

Endpoint: POST /api/create-escrow

Request:

{
  "price": "100000000",
  "commission": "2000000",
  "store_wallet": "0x...",
  "consumer_wallet": "0x...",
  "influencer_wallet": "0x..."
}

Response (Success):

{
  "success": true,
  "message": "Escrow created successfully",
  "kairoAnalysis": {
    "decision": "ALLOW",
    "status": "PASSED",
    "risk_score": 0
  },
  "contract": {
    "dealId": "0x...",
    "transactionHash": "0x...",
    "blockNumber": 12345
  }
}

Response (Error):

{
  "success": false,
  "error": {
    "message": "Error description"
  }
}

curl -X POST http://localhost:3000/api/create-escrow \
  -H "Content-Type: application/json" \
  -d '{
    "price": "100000000",
    "commission": "2000000",
    "store_wallet": "0x70997970C51812dc3A010C7d01b50e0d17dc79C8",
    "consumer_wallet": "0x3C44CdDdB6a900fa2b585dd299e03d12FA4293BC",
    "influencer_wallet": "0x90F79bf6EB2c4f870365E785982E1f101E93b906"
  }'

1. API receives JSON with price, commission, and wallet addresses
2. Kairo analysis runs automatically on the contract
3. If Kairo passes (ALLOW/WARN) → Deal is created on blockchain
4. If Kairo blocks (BLOCK/ESCALATE) → Error logged, request fails
5. Consumer funds → Deposits price
6. Store funds → Deposits commission
7. Auto-release → Funds go to store and influencer

Every API request automatically:

• Analyzes the contract with Kairo
• Returns decision (ALLOW/WARN/BLOCK/ESCALATE)
• Blocks deployment if security issues found
• Logs all findings

• ALLOW ✅ - Safe to proceed
• WARN ⚠️ - Review findings, can proceed
• BLOCK ❌ - Do not deploy, fix issues
• ESCALATE 🚨 - Requires human review

.
├── contracts/
│   ├── CreatorCheckoutEscrow.sol  # Main escrow contract
│   └── MockUSDC.sol                # Mock USDC for testing
├── test/
│   └── escrow.test.js              # Test suite
├── scripts/
│   ├── deploy.js                   # Deployment script
│   └── kairo-deploy-check.sh       # Pre-deployment check
├── api/
│   └── server.js                   # REST API server
├── .github/
│   └── workflows/
│       └── kairo-security.yml      # CI security gate
└── errors                           # Error log file

Creates a new escrow deal. Returns dealId.

Consumer deposits price. Auto-releases if store already funded.

Store deposits commission. Auto-releases if consumer already funded.

Owner can refund if deal not completed.

All errors are automatically logged to the errors file with:

• Timestamp
• Request data
• Kairo analysis results
• Error details

The GitHub Actions workflow automatically:

• Runs Kairo analysis on every PR
• Blocks merges if Kairo returns BLOCK/ESCALATE
• Shows security findings in PR comments

Setup:

1. Add KAIRO_API_KEY to GitHub Secrets
2. Push a PR - workflow runs automatically

# Compile
npm run compile

# Test
npm test

# Start API
npm run api

# Deploy
npm run deploy

The project is configured for Render deployment with render.yaml and Procfile.

Required Environment Variables:

• KAIRO_API_KEY - Your Kairo API key
• ESCROW_ADDRESS - Deployed contract address
• RPC_URL - Blockchain RPC endpoint (Infura/Alchemy/public RPC)
• NODE_ENV=production

Steps:

1. Deploy contracts to target network (save ESCROW_ADDRESS)
2. Push to GitHub
3. Connect repository to Render
4. Set environment variables in Render dashboard
5. Deploy - Render uses Procfile automatically

The API automatically detects production mode and uses ethers.js Provider instead of Hardhat.

For mainnet/testnet deployment, update hardhat.config.js:

networks: {
  mainnet: {
    url: process.env.MAINNET_RPC_URL,
    accounts: process.env.PRIVATE_KEY ? [process.env.PRIVATE_KEY] : [],
  },
}

Then deploy:

npm run deploy --network mainnet

MIT