Security
Trust, but verify.
Every contract, key, and parameter is published, timelocked, and externally reviewed before it ever holds value.
Independent audits
Multiple reputable firms before mainnet. Reports published in full.
Public bug bounty
Tiered rewards via Immunefi, live from testnet through mainnet.
48-hour timelock
No admin action executes without a public review window.
No hidden mint key
Minting is governed by the activity oracle and DAO — not a private key.
Audit roster
Who reviews the code
Final firms confirmed pre-Phase 2. Reports published with the testnet release.
Contract addresses
On-chain, verifiable
Published here at TGE. Bookmark this page — never trust addresses from DMs.
Responsible disclosure
Found a vulnerability?
We pay out fairly and we move fast. Please do not disclose publicly until a fix has shipped.
PGP key published at /.well-known/security.txt at TGE. Bounty tiers: Critical $100k, High $25k, Medium $5k, Low $500 (testnet rates; mainnet rates set with launch).