Security
A defense-in-depth security model with independent audits and responsible disclosure.
Two external audits of the first version, every finding resolved, and an initial response to reports in under 24 hours. Dusk, the second version, is not yet audited.
Independently verified
The first version was reviewed by independent security firms, and every completed audit report is public.
| Firm | Scope | Date | Report |
|---|---|---|---|
| Offside Labs | Core protocol & programs | Feb 2026 | View report |
| Ackee | Fuzzing tests | Feb 2026 | View report |
Bug bounty · coming soon
Rewards are assessed based on severity and potential protocol impact. Send reproducible reports and we will triage within 72 hours.
In scope
- Smart contract logic & state handling
- Frontend vulnerabilities affecting funds
- Cross-contract reentrancy
- Access control and privilege escalation
Critical findings are prioritized immediately and handled through coordinated disclosure.
Our commitment to researchers
Responsible disclosure protects users and rewards good-faith research.
- Safe harbor
- Good-faith researchers will not face legal action for responsibly reported vulnerabilities.
- Response timeline
- We respond to initial reports within 24 hours and keep researchers updated throughout.
- Coordinated disclosure
- We work with researchers to agree on a disclosure timeline that protects users.
Found something?
If you discovered a potential vulnerability, we want to hear from you. Write to security@omnipair.fi.