Skip to main content

Audits

The contracts are reviewed with automated analysis and an independent audit before launch. Launch requires a completed audit with findings fixed and re-reviewed.

Development practices

Built on OpenZeppelin libraries with Foundry. [TBD: test coverage report]

Admin functions

Timelocks

[TBD: which actions are timelocked, and for how long]

Upgradeability

[TBD: whether contracts are upgradeable, and how upgrades are approved]

Governance

Credit and collateral decisions are not put to token votes. See Governance.

Emergency pause

[TBD: who can pause, what can be paused (global, per contract, per function), and how unpausing works] A pause stops onchain actions. It does not stop offchain loans: borrowers keep paying and servicers keep working while the contracts are paused.

Bug bounty

[TBD: bug bounty program and size]

Monitoring

[TBD: onchain monitoring]

Assumptions

  • NAV updates are only as accurate as the offchain loan book and its reporting.
  • Admin keys are held as described in Admin functions.
  • Robinhood Chain operates as expected.
[TBD: full list of assumptions]

Reporting a vulnerability

[TBD: security contact]