Telmesh.io NFT Marketplace

How does listing work?

Listings are non-custodial. Your NFT remains in your wallet while it is listed. Before listing, you approve the marketplace contract so it can transfer that NFT only if a buyer completes the purchase.

How seriously is smart contract security treated?

Security has been treated as a core consideration throughout development. The marketplace contract was designed around explicit wallet approvals, non-custodial listings, strict payment checks, and limited admin controls.

What happens when I buy?

When you buy, your wallet sends a transaction to the marketplace contract. The contract checks that the listing still exists, that the price and payment token match, then transfers payment and moves the NFT to the buyer.

Is the approval model similar to OpenSea?

The approval model is similar to marketplaces such as OpenSea: sellers keep custody of the NFT until sale execution, while the contract receives permission to transfer it when the sale is valid.

Do I lose custody when listing?

No. The NFT stays in your wallet until a buyer completes a valid purchase transaction.

Can the marketplace access all assets in my wallet?

No. The marketplace contract can only interact with assets that your wallet has explicitly approved on-chain. For NFTs, that approval may apply to one specific NFT or to a full collection, depending on what you sign in your wallet. Always review approval prompts carefully, and never share your seed phrase or private keys.

How is the marketplace contract owner secured?

The marketplace contract owner is controlled from a hardware-protected wallet. Owner-only actions are limited to admin configuration such as accepted payment tokens, marketplace fee settings, fee recipient updates, and pausing.

Can Telmesh.io recover my wallet or seed phrase?

No. Telmesh.io cannot recover wallets, seed phrases, private keys, or reverse blockchain transactions. Your wallet security remains your responsibility.

Will Telmesh.io ever ask for my seed words?

No. Telmesh.io will never ask for seed words or private keys. If anyone asks for them, they are trying to scam you.

Should I use a hardware wallet?

For higher-value assets, a hardware wallet is strongly recommended. You should also keep your device, browser, wallet extensions, and recovery phrase secure.

Why do I need to approve?

The smart contract cannot transfer your NFT unless you explicitly approve it. Approval is what makes a later buyer transaction possible.

Can I remove marketplace approval if the site is down?

Yes. You can inspect and revoke marketplace approvals from your wallet's token approval settings or through the chain's block explorer by interacting directly with the NFT contract.

Can prices change after I select an NFT?

The purchase transaction includes the expected price. If the listing changes before your transaction executes, the contract rejects the stale purchase.

Can I accidentally buy at a different price?

The purchase transaction includes the expected price. If the seller changes the listing before your transaction is executed, the contract rejects the purchase instead of silently accepting the new price.

Can I accidentally pay with the wrong token?

The contract checks the payment token in the purchase transaction against the live listing. If the token does not match, the transaction is rejected.

Which payment tokens are allowed?

ERC-20 payment tokens must be accepted by the marketplace owner before they can be used. Native chain payments use the zero address internally.

What happens if the marketplace fee changes?

Each listing stores the marketplace fee that applies to that listing. If the fee changes later, existing listings keep their stored fee until the seller updates the listing price or payment token.

Is there a limit on marketplace fees?

Yes. The smart contract caps the marketplace fee with a maximum value, so the owner cannot set an unlimited fee.

What OpenZeppelin components are used?

The marketplace uses OpenZeppelin components for ownership, two-step owner transfers, pausing, reentrancy protection, safe ERC-20 transfers, and ERC-721 interfaces.

Why use Ownable2Step?

Ownable2Step makes ownership transfer safer by requiring the new owner to accept ownership. This reduces the risk of accidentally transferring control to the wrong address.

Why can the marketplace be paused?

The pause switch lets the owner stop state-changing marketplace flows such as listing, buying, and price updates during an incident or maintenance window.

How is reentrancy handled?

Purchase flows use OpenZeppelin's ReentrancyGuard. The contract also validates purchases first, removes listings before settlement, and then performs transfers.

Are batch actions limited?

Yes. Batch listing, batch buying, and batch cancellation all have hard maximum sizes to keep transaction behavior bounded.

Has the contract been tested?

Yes. The marketplace contract is covered by Foundry tests with 100% line, statement, branch, and function coverage.

Has static analysis been run?

Yes. Slither static analysis is part of the smart contract review workflow, alongside Mythril security analysis where available.

What did RemixAI Assistant say?

RemixAI Assistant noted that no major security vulnerabilities leading to scams or loss of funds were immediately visible, and highlighted ReentrancyGuard, SafeERC20, Ownable2Step, input validation, and the non-reentrant purchase flow.

Where can I see my history?

Connect your wallet and open Transactions. Purchases and Sales are shown in separate tabs for easier review.

Why do I need to sign the Terms?

Terms signing confirms that the connected wallet has accepted the current Terms & Conditions before using marketplace actions such as listing, buying, updating prices, or connecting a wallet.

What exactly am I signing?

Your wallet signs a readable message that includes your wallet address, the chain id, the Terms version, and the document hash for the exact Terms text. This lets Telmesh.io verify later which Terms version that wallet accepted.

Is the Terms signature stored on the blockchain?

No. Terms acceptance uses a local wallet signature only. Nothing is written to the blockchain for Terms signing, so it does not create a blockchain transaction or gas cost.

What happens when the Terms are updated?

Each Terms version has its own document hash. If the current version changes, your previous signature no longer matches the current hash, and the app asks you to review and sign the updated Terms before using the marketplace again.

Where can I see or delete my Terms signature?

Open Profile from the wallet dropdown to see signed Terms versions, signed dates, document hashes, and the Terms text that was signed. You can delete stored Terms signatures there when the wallet has no active listed NFTs.