Security & Trust
Risks & disclosures
The main risks users and integrators should understand.
Smart contract risk
Any DeFi protocol involves smart contract risk. Even audited code can have unknown vulnerabilities.
Cross-chain risk
Cross-chain operations add additional risk surfaces, including messaging assumptions and bridge dependencies.
Market risk
Price movements, volatility, and liquidity conditions can affect execution outcomes.
Operational risk
Network congestion, chain outages, and RPC issues can delay completion or cause failures that require retry/cleanup.
Off-chain trust
Locked liquidity sits in per-asset vaults as a principal claim, not a tradeable share, and the vault itself holds the tokens.
- Same-chain realized PnL is derived straight from on-chain settlement events, no key can move it.
- A narrowly-bounded reporting role values capital currently deployed cross-chain, in-flight before the bridge/message finalizes. A report can move a strategy's valuation by at most 25 bps/day, capped at an immutable 500 bps ceiling, and any over-report is caught and clawed back once the real settlement lands.
- Async withdrawal of deployed capital is bounded by an immutable 7-day maximum timeout, so a request can never be withheld indefinitely.
- A separate role can pause/veto (but not unpause alone), and upgrades pass through a timelock delay.
See Non-custodial design for the guarantees this rests on.
No guarantees
Nothing in these docs is financial advice. Returns are not guaranteed.