Verification / 01

Security model and open trust

Security is split across contract code, privileged administration, off-chain execution, custody and external evidence. No single badge covers the whole system.

Evidence scope · implementation, public chain state, third-party reports, operator disclosures

On-chain verifiedReentrancy guardApplied to orders, cancellation and withdrawals.
Third-party assessedAegixe0 Critical, 0 High, 1 Medium, 1 Low.
OpenAdmin controlOwner controls upgrades, receivers, fees, mint and burn.
UnavailableAudit-bytecode linkNo commit or deployed bytecode hash in report.

Control layers

Contract controls

Input bounds, allowance checks, transfer checks, reentrancy guard, fee caps and disabled implementation initializers.

Operational controls

Owner-key security, deployment review, broker reconciliation and receiver-account management are not contract-governed.

Current limitation. The audit recommends multisig/timelock governance and on-chain order state. Both findings remain observable.