Smart-Contract Audits
The contracts that mint, auction and hold value (the minting guard, the Genesis curve and the batch auction) will be independently audited before they go live on mainnet. No audit has been completed yet. Reports will be listed here as they are published.Stock and Financial Audits
Reporting a Vulnerability
A formal bug bounty with reward tiers has not launched yet. Until it does, we still want to hear from you and will credit responsible disclosures.1
Prepare
Document the issue, the steps to reproduce it and its impact.
2
Submit
Email cargovaults@gmail.com with the subject line “Security”. Do not post details publicly.
3
Wait
Give us time to triage and fix before any disclosure. We will confirm receipt and agree a timeline with you.
Never test against mainnet contracts or real funds. Use a local fork or a testnet.