Audited by three firms · Reports public
On-chain settlement with the receipts published.
Every contract audited by three independent firms, every report linked in full including the findings we have not fixed yet.
Before you connect anything
The three things worth checking about any protocol, including this one.
2024 — 2026
Three audits, published whole
Full reports, not summaries. Two medium findings remain open and are marked as such.
2024 — 2026
72 hours
Timelocked upgrades
Every contract change waits three days on-chain. You can always exit before it lands.
72 hours
Renounced
No admin mint
Minting was renounced at deployment. The transaction is linked from the docs.
Renounced
3
Independent audits
72h
Upgrade timelock
0
Admin mint functions
100%
Reports published in full
Integrations
Connects to what you already run
Hardware wallets
Ledger and Trezor, with full transaction decoding on the device.
WalletConnect
Any compliant wallet, with the calldata shown before you sign.
Chainlink oracles
Price feeds with published deviation thresholds and heartbeats.
Verified on Etherscan
Every contract source verified against the deployed bytecode.
Safe multisig
Governance executes through a 5-of-9 Safe, with addresses published.
The Graph
An open subgraph, so anyone can audit protocol state independently.
Pricing
Priced so you can work it out yourself
Read
Free
no wallet
- ✓
Full protocol analytics
- ✓
Open subgraph access
- ✓
All audit reports
- ✓
Governance forum
Participate
0.05%
per settlement
- ✓
On-chain settlement
- ✓
72-hour upgrade timelock
- ✓
Non-custodial throughout
- ✓
Published fee schedule
Institutional
Custom
negotiated
- ✓
Volume fee schedule
- ✓
Dedicated settlement lane
- ✓
Compliance attestations
- ✓
Direct engineering contact
“They list the unresolved findings on the front page. I have never seen a protocol do that voluntarily.”
Daniel Okafor
Security researcher
Questions people ask first
What are the unresolved audit findings?
Two medium-severity items from the Spearbit review remain open: one on oracle staleness handling, one on rounding in fee accrual. Both are described in full on the audits page, with our reasoning and a timeline.
Can the team change the contracts?
Only through a 5-of-9 multisig, and every change waits 72 hours on-chain before it can execute. You can always exit inside that window.
Is there an admin mint function?
No. Minting was renounced at deployment, and the transaction hash is linked from the documentation.
What if an oracle fails?
Settlement pauses rather than using a stale price. That is the conservative choice, and it does mean the protocol can halt.
Read before you connect.
Audits, timelock addresses and the open findings are all linked from the documentation.