Your funds never touch our servers. Your trades stay private. Our code is audited, open-source, and watched 24/7. Here's exactly how we keep it that way.
The instant both parties agree, your funds are locked in a smart contract you can verify on-chain. Not in a hot wallet. Not on our servers. Not anywhere we can touch.
Every message between traders is encrypted client-side. The contract sees only what it needs to — amounts, conditions, signatures. The rest? Nobody can read it. Not us, not validators, not the chain.
We don't just say our code is safe — we pay the best security firms in crypto to try and prove it isn't. Trail of Bits, Halborn, Code4rena. Every report is public.
Every contract is watched in real time. Anomaly detection, large transfers, unexpected state — anything weird wakes someone up at 3am. We've got 42 CI gates and on-call engineers across 3 time zones.
Security only works if everyone knows their job. Here's the honest split.
Even with audits and monitoring, we plan for the day something goes wrong. Here's exactly what happens.
Forta + Tenderly alerts fire to PagerDuty. On-call engineer wakes up. We classify severity (P0 = funds at risk, P1 = service down, P2 = degraded).
If P0, we trigger the emergency pause. This is the only privileged action that exists, and it's a one-way switch: it stops new deals but never moves user funds.
Status page updated. Twitter post pinned. Discord & Telegram pings. We tell users what we know, what we don't, and what to do (usually: nothing, your funds are safe in the contract).
Public write-up. Root cause, timeline, what we fixed, what we changed in our process. No PR-speak. Auditors review the fix before we unpause. Same standard as new code.
Our security team reads every email. Bugs go via Code4rena or directly to us — we PGP, we pay, we don't sue.