Deuteronomy 8:18

Security review

Audit registry & live contracts

Every automated security pass G1 has run, with the full report one click away. An independent third-party human audit is pending and not claimed — nothing on this page says otherwise. Back to how it works →

Audit registry

Audit passDateScopeVerdictReport
Slither static analysisNo real vulns in G1 code; high-sev flags are known OpenZeppelin false positives.Pre-launchAll money-path contractsSafeFull report →
Mythril symbolic executionNo reentrancy, overflow, unchecked-call, or assertion findings.Pre-launchDepositRouter · UnwindRouter · FeeManagerSafeFull report →
Foundry fuzz — 70,000 runsMin-out, FTSO floor, fee cap, router-holds-nothing, atomicity — zero failures.Pre-launchMoney-path invariantsPassFull report →
Mutation testingEvery slippage / FTSO / fee-math mutation caught by a failing test.Pre-launchFund-affecting mathPassFull report →
Authorization / IDOR auditAttacker cannot unwind, redirect, or spend a victim's position.2026-07-02DepositRouter · UnwindRouter · RateLens · FeeManagerSafeFull report →
Adversarial human-class review19 red-team tests; 1 low + 1 info finding, both fixed / mitigated.2026-07-028 human-only classes: first-depositor, integration-trust, FoT, decimals, oracle-gap, unwind MEV, pause, griefingPassFull report →
Mainnet-fork validation63 / 63 fork tests pass against live Flare-mainnet state (block 63,482,738).2026-07-02Full money path on live Flare statePassFull report →

Live contracts (Flare mainnet, chain 14)

DepositRouter

The single money-path entry. Pulls the deposit, skims the one-time fee, routes into the yield venue, mints the position to you.

Verify contract ↗
RateLens

Read-only pricing/quote lens (FTSO spot + Spectra fixed quotes). Holds no funds.

Verify contract ↗
UnwindRouter

Non-custodial Grow exit periphery — redeems vault shares straight back to you with a min-out floor.

Verify contract ↗