> ## Documentation Index
> Fetch the complete documentation index at: https://docs.startale.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Contracts and audits

> Deployed paymaster, account, and validator addresses for the Startale AA SDK, plus links to the audit reports.

Every contract the SDK talks to is open source and audited. Use this page as the canonical reference when you need an address, an ABI, or an audit report.

<Note>
  Source repositories: [`scs-aa-account-contracts`](https://github.com/StartaleLabs/scs-aa-account-contracts), [`scs-aa-paymasters`](https://github.com/StartaleLabs/scs-aa-paymasters). The SDK that consumes them is at [`StartaleGroup/scs-aa-sdk`](https://github.com/StartaleGroup/scs-aa-sdk).
</Note>

## Account contracts (v1.0.0)

These are the contracts deployed by `toStartaleSmartAccount` and referenced by the modular account.

| Contract                        | Address                                      | What it does                                                                                         |
| ------------------------------- | -------------------------------------------- | ---------------------------------------------------------------------------------------------------- |
| Startale Account Implementation | `0x000000b8f5f723a680d3d7ee624fe0bc84a6e05a` | The ERC-7579 modular account logic. Used as `implementationAddress` for [EIP-7702](/aa-sdk/eip7702). |
| Startale Account Factory        | `0x0000003B3E7b530b4f981aE80d9350392Defef90` | CREATE2 factory used by the SDK to deploy accounts on first UserOperation.                           |
| Bootstrap                       | `0x000000552A5fAe3Db7a8F3917C435448F49BA6a9` | Initialiser contract that wires modules into a fresh account.                                        |
| ECDSA Validator                 | `0x00000072F286204Bb934eD49D8969E86F7dEC7b1` | Default ERC-7579 validator. Validates signatures from a single ECDSA key.                            |

The corresponding npm release is `@startale-scs/aa-sdk` `^1.0.x`. When new account-contract versions ship, the SDK exposes them through new releases; pin the SDK version that matches the contract version you have audited.

## Paymasters

Both paymaster modes from the [Portal](/aa-sdk/tutorials/portal) are implemented by the contracts below.

| Contract                       | Address                                      | Purpose                                                                                                                        |
| ------------------------------ | -------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------ |
| Postpaid Sponsorship Paymaster | `0x00000095901E8AB695Dc24FA52B0Cce15E9896Ad` | Backs the **managed** paymaster. SCS settles gas in fiat.                                                                      |
| Prepaid Sponsorship Paymaster  | `0x0000002deA684Ecd1979140746CF415AD46D8b16` | Backs the **self-funded** paymaster. Sponsor balance is debited per UserOp.                                                    |
| Startale Token Paymaster       | `0x0000006C18daC1Ff8F50Df743F7587a8b7d8a8a7` | Accepts ERC-20 tokens as gas. See [Supported networks](/aa-sdk/resources/supported-networks#token-paymaster-supported-tokens). |

## ERC-7579 validator and module addresses

The SDK exposes typed helpers for the modules below. Their onchain addresses are stable across Soneium Minato and Mainnet.

| Module                        | Address                                                      | SDK helper                                                                           |
| ----------------------------- | ------------------------------------------------------------ | ------------------------------------------------------------------------------------ |
| ECDSA Validator               | `0x00000072F286204Bb934eD49D8969E86F7dEC7b1`                 | Installed automatically by `toStartaleSmartAccount`.                                 |
| Smart Sessions Validator (V1) | `0x00000000008bDABA73cD9815d79069c247Eb4bDA`                 | `getSmartSessionsValidator`, `toSmartSessionsValidator` from `@startale-scs/aa-sdk`. |
| Social Recovery Validator     | See [`@rhinestone/module-sdk`](https://docs.rhinestone.wtf/) | `getSocialRecoveryValidator` (re-exported through `@rhinestone/module-sdk`).         |

## Audit reports

| Repository                 | Audits                                                                                     |
| -------------------------- | ------------------------------------------------------------------------------------------ |
| `scs-aa-account-contracts` | [audit reports](https://github.com/StartaleLabs/scs-aa-account-contracts/tree/main/audits) |
| `scs-aa-paymasters`        | [audit reports](https://github.com/StartaleLabs/scs-aa-paymasters/tree/main/audits)        |

If you are integrating the SDK into a production system, read the audit reports for the contract version that matches your SDK pin and confirm that the addresses above match the deployments referenced in those reports.

## Verifying onchain

You can verify any address with the public Soneium block explorers:

* Minato: [soneium-minato.blockscout.com](https://soneium-minato.blockscout.com/)
* Mainnet: [soneium.blockscout.com](https://soneium.blockscout.com/)

## Next steps

<CardGroup cols={2}>
  <Card title="Supported networks" icon="folder" href="/aa-sdk/resources/supported-networks">
    Chain IDs, EntryPoint version, and supported gas tokens.
  </Card>

  <Card title="EIP-7702 guide" icon="cpu" href="/aa-sdk/eip7702">
    Use the implementation address as the EIP-7702 delegation target.
  </Card>

  <Card title="Smart sessions" icon="key-skeleton" href="/aa-sdk/tutorials/smart-sessions">
    Install the Smart Sessions validator on top of the modular account.
  </Card>

  <Card title="Social recovery" icon="user-shield" href="/aa-sdk/tutorials/social-recovery">
    Install the Social Recovery validator with a guardian set.
  </Card>
</CardGroup>