Docs / Trust / Security
Security.
The core compiles and passes 127 tests across 18 suites against a live Uniswap v4 pool in the harness. External security review is the gate before public mainnet.
This page covers the review gate and the invariants the design holds.
Review status The graduate-in-place core (curve pricing, the graduation flip, the always-on split, the flywheel accrual) compiles and passes 127 tests across 18 suites end to end against a live Uniswap v4 pool in the harness. External security review is the gate before public mainnet.
The review line, when it exists
When a report is published, this page will state it in one line:
Reviewed by [firm]. Report: [link].
The firm's name and the report link. The line does not appear before the report does.
The invariants
The security review defines twenty-five invariants the design must hold. The load-bearing ones:
- Non-custodial. No admin path can drain or redirect funds, POL, or rewards.
- Pause-only emergency power. The only privileged action stops the system; it cannot move value.
- The pool cannot leave the hook. Graduated liquidity is bound in place.
- Wash-resistant metering. The active-traders share's incentive-compatibility rests on the 45% unrecoverable share (proposed), verified under the final numbers in the sim.
The long pole The external security review is the critical-path item before public mainnet. The current estimate is 8 to 12 weeks to public and 2 to 3 weeks to testnet, an estimate rather than a commitment. No real funds are at stake until the review is complete.