The Security Stack
Code Review and Testing
Contracts that mint, auction and hold value will be independently audited before mainnet; no audit has been completed yet. Reports will be published on Audits & Bug Bounty.Access Controls
- Privileged functions (minting, pausing, parameter changes, identity registry updates) are restricted to named roles.
- The identity registry signer key is held under the Safe policy.
- Parameter and rule changes follow 30 days’ notice; only safety pauses are immediate.
Operational Security and AML
- KYC and KYB through Persona, with sanctions, PEP and adverse-media screening.
- Wallet screening on registration, on every new order and every six months; wallets exposed to sanctioned addresses are frozen pending review.
- Source of funds checked above $100,000.
- Identity data stays with the verification provider and the compliance team. Only a participant ID and wallet status go on-chain.
- Deposit addresses are confirmed by phone with a named director and a test transfer, never by message.
Incident Response
1
Detect
Automatic triggers: NAV oracle failure, a collateral-manager discrepancy above 0.5%, a sanctions hit or a chain incident.
2
Contain
The affected batch, creations or redemptions are suspended. A suspect lot is frozen until topped up or met from subordinated shares, with an independent recount.
3
Communicate
The reason is published on the official channels and sent to eligible investors.