Security

Audit status

Unaudited at launch. We are actively seeking an audit partner. Until then, please only deposit what you can afford to lose.

Security measures

• Reentrancy guards on all external functions
• Slippage bounds on every internal swap
• No upgradeable proxies (immutable vaults)
• Fuzz and invariant testing with Foundry
• Emergency pause blocks deposits only, never withdrawals

Admin keys

Initial deployment uses a team multisig. Plan is to transition to immutable contracts or governance as the protocol matures.