Contracts & Security
Security reference for the contract surfaces, external dependencies, and review boundaries behind LP-backed lending.
Overview
LP-backed lending connects contract accounting to position custody, oracle prices, and DEX-specific liquidation routes. Security review therefore covers both transaction execution and the effect of changing market conditions on collateral value and recovery. Contract, economic, and operational review address different parts of that system. A valid contract call can still produce an incorrect lending result if its price input is stale or its assumed liquidation route cannot execute.
Security Challenges
- • LP value can be path dependent and often needs DEX-specific custody and unwind logic.
- • Oracle misuse or stale pricing can create economic loss even when contracts execute exactly as coded.
- • Governance, parameter control, and emergency response are all part of the attack surface.
Multi-Layer Security
Contract review
Review of a new LP family or execution path covers the affected core contracts, DEX adapters, and privileged controls before enablement.
Economic stress testing
Stress testing examines market shocks, oracle edge cases, and liquidation-routing failures alongside individual contract behavior.
External review channels
Formal audits and the Bug Bounty program provide complementary review channels: audits assess a defined code scope, while bounty reports can identify additional exploitable behavior.
Core Contract Surfaces
Borrow Spoke logic
Handles collateral admission, user accounting, and the spoke-side lifecycle for LP-backed loans.
Hub integration
Connects spoke-level borrowing capacity to shared credit and liquidity constraints in the Hub layer.
Oracle and valuation adapters
Translate LP positions into conservative collateral values using external prices, position reconstruction, and recoverable-value assumptions.
Liquidation execution layer
Coordinates unwind paths, fee realization, routing, and settlement when an unhealthy account must be closed or resized.
Trust Boundaries
- • Onchain accounting and settlement require deterministic state changes so debt, vault supply, and backing collateral remain consistent.
- • Price feeds, DEX adapters, and liquidator infrastructure introduce dependencies whose failures can affect valuation or recovery.
- • Governance, pause authority, and upgrades are privileged controls. Their roles, limits, and applicable timelocks define who can change protocol behavior.
Audit Readiness
Published audit reports identify the code and scope reviewed, the findings, and documented remediation. Deployment review depends on those reports; this page does not establish an audit status or completion date. Changes to LP support, liquidation routes, oracle models, privileged roles, or recovery assumptions affect the review scope because they change how collateral is admitted, valued, or settled.