authenticity
& provenance.

SQUIZITO's on-chain authenticity framework applies to every SQUIZITO release · current and future. Some identifiers below are brand-wide and never change. The contract address changes every time a new series opens · the currently-active series' contract is listed here and updated on this page at every launch.

Memorise these. Photograph them. Print them. If a piece you are about to buy does not match every one of them, walk away.

· brand-wide identifiers · the same for every SQUIZITO piece, every series, forever

· current series · these values rotate when a new series opens · this page is republished at every launch

Any contract on Base or any other chain with a different address, a different ticker, or a different atelier vault is not SQUIZITO, no matter how convincing the storefront, the brand name, or the Instagram handle around it. When a new series opens, the new contract address will appear on this page · the brand-wide ticker, vault, and chain remain unchanged.

Every SQUIZITO package contains a small black envelope, sealed with a single drop of acid-yellow wax stamped with the brand pictogram. The wax is the tamper-evidence: if the seal is intact when you receive the package, no one has read the contents. If the seal is broken on arrival, contact hello@squizito.me before scratching anything · the atelier can confirm and re-issue.

Inside the envelope is the authenticity card. It carries your serial on the front and the 16-character authenticity code on the back, printed in typewriter type · the same code the contract stored at mint time as a one-way hash. Type the code at squizito.me/verify and the chain confirms.

The card is the cryptographic proof of authenticity for this specific piece. Treat it the way you would treat the key to a safe-deposit box:

• Keep it forever. A piece without its card cannot be re-verified.
• If you resell, hand it to the next owner with the garment. Resale without the card forecloses the buyer's ability to check authenticity.
• Don't photograph the code and don't share it. Anyone who has the code can pass the verify page's card check for that one piece. The wax-sealed envelope existed to protect this exact secret.
• Lost or damaged? Email hello@squizito.me with your serial and proof of purchase · the atelier can re-derive the code from the per-drop master and re-issue a fresh card, up to three times per piece. Beyond three, the atelier revokes the token and re-mints a replacement at a new serial.

The atelier holds the master secret for each drop on an engraved stainless-steel plate stored offline, in the same safe-deposit box as the recovery phrase for the contract's signing wallet. The master is never digitised after mint and is never transmitted over a network. There is no plaintext copy of any card's code on any SQUIZITO server.

Counterfeiters do not need to crack cryptography to fool a casual buyer. They need to make a shirt that looks right and a QR code that resolves to something that looks like an authenticity page. Here is what they try, and how the four-anchor check defeats each play.

1. Fake QR pointing at a fake verify site. A counterfeit shirt could carry a QR code that loads squizit0.me/verify/ or squizito-official.com/verify/ instead of the real domain. Defence: the only authoritative domain is squizito.me (and it shows the contract address in plain text on every verify page · cross-check it against this page).
2. Fake contract that impersonates ours. Anyone can deploy a contract on Base and name it "SQUIZITO" or "SQZTO" or "Squizito Atelier". They could even copy our SVG. Defence: the current series' contract address listed in section 01 is the only address the verify page queries, and it's immutable for the lifetime of that series. A fake contract has a different address · the BaseScan link will not match. The atelier vault address is brand-wide and identical for every series, so even a counterfeiter who deploys a "SQZT"-ticker contract cannot fake the vault check.
3. Fake contract that copies our ticker. A counterfeiter could set symbol() = "SQZT" on their own contract to pass the ticker anchor. Defence: the address still differs. Even if the ticker matches, the vault anchor (ownerOf(tokenId) must equal the official atelier vault) fails · the counterfeiter would have to compromise our cold wallet, which is held offline on a hardware key.
4. Fake screenshot of a verification page. A reseller could send you a JPEG of a green "authentic" banner instead of the live page. Defence: always open the verify link yourself, on your own device, after typing squizito.me/verify/<your serial> manually if you have any doubt. Never accept a screenshot as proof.

In every case the answer is the same: the address printed in section 01 is the only address that can produce a genuine SQUIZITO certificate. If your verification points at any other address · or no address at all · it is not us.

If a piece is reported stolen, used to settle a counterfeit complaint, or otherwise compromised, the atelier can call revoke(tokenId, reason) on the contract. The token is not destroyed · it stays on-chain · but its metadata flips to Status: Revoked, the SVG renders with a red diagonal overlay and a "REVOKED" stamp, and the verify page surfaces the revocation reason.

Revocation is recorded forever in the contract's event log (ERC-4906 MetadataUpdate event). It can be reversed only by a deliberate reinstate call by the atelier, which is also recorded on-chain. Both actions are gated by the atelier's hardware-wallet-only ATELIER_ROLE.

Practical consequence: if your serial verifies as revoked, the piece is no longer recognised as authentic, regardless of how it physically appears. Contact the atelier (section 07) if you believe the revocation is in error.