Status
Every finding that results in a code change is re-reviewed before the audited bytecode hash is registered in the factory — which means every deployed vault provably runs the reviewed code (the factory rejects any other bytecode).
Our posture
- Multiple independent review methodologies, not a single firm’s pass.
- Audit scope covers the parts that hold money: the vault, its fee accounting, the operator boundary, and the exit paths.
- Reports are published in full, findings included — an audit summary without the findings is marketing.
Audits reduce risk; they do not eliminate it. Read Smart contract risk and size deposits accordingly.