HomeMarketsPortfolioProtocolDocsAPISecurity
SECURITY

Security is a release gate.

ArcCredit treats compiler evidence, tests, oracle validation, governance rehearsal, monitoring and external review as prerequisites for real-money activation.

Pre-audit
01

Governance delay

Production authority is intended to flow from a Safe multisig through a Timelock before parameter changes reach the Pool or Oracle.

02

Emergency controls

Guardians can stop new risk quickly. Liquidation emergency mode also blocks new risk until the admin restores liquidation.

03

Oracle validation

Feed bytecode, decimals, round state, timestamps and staleness are checked before a price is accepted.

Release gates

Current public release posture

Frontend production packageREADY
Exact Solidity compiler passREQUIRED
Foundry unit / fuzz / invariantREQUIRED
Static analysisREQUIRED
Independent security auditREQUIRED
Low-cap Arc canaryREQUIRED
RESPONSIBLE DISCLOSURE

Report security issues privately.

Before real-money contract activation, ArcCredit will publish a monitored responsible-disclosure channel and the applicable bug-bounty scope.

Disclosure channel published before contract activation