Read the contracts, not the tweets.

Audits

Vaults are live after an internal review. No independent audit has been done yet, so each vault has a deposit cap that only rises as it proves itself.

Contracts

These are the only official addresses. If an address isn't on this list, it isn't ours. Check before you approve anything.

Chainlink price feeds

Each vault prices its Stock Token with the feed below. Addresses are the proxy contracts from Chainlink's Robinhood Chain directory; check them there before relying on them.

Safeguards

• Oracle-priced deposits. Shares are minted at the Chainlink value, so moving the pool price doesn't mint cheaper shares.
• Pool deviation check. Deposits and recentres revert if the pool is more than 0.6% away from the oracle. That blocks buying in at a lagging price and limits what a sandwich can take.
• Deposit fee. 0.30%, paid into the vault, so stale-price arbitrage doesn't pay.
• Rate-limited recentres. Only when needed, at most once every 10 minutes.
• Stale feed and sequencer checks. Old prices and a down sequencer block deposits and recentres instead of guessing.
• Deposit caps. Each vault starts capped (10,000 USDG) and the cap rises only as it proves itself.
• Exits can't be paused. Pausing stops deposits and recentres. Withdrawals always stay open, and if a token is frozen for your address, the rest still pays out and the frozen part waits for you to claim.
• Bounded admin. Every owner setting has a hard limit in code and emits an event when changed.

Bug bounty

A formal bounty with fixed payouts opens alongside the audit. Until then, if you find a vulnerability:

• Send it privately via DM on X. Don't post it publicly or test it against live funds.
• Include the contract, what goes wrong, and a way to reproduce it.
• We aim to reply within 72 hours, and credit you publicly if you'd like.