Security · 07 / 08
Open Source Foundation
Token, vesting and timelock logic comes from OpenZeppelin Contracts v5.6.1, pinned to an exact commit and used without modification. ARL-specific code is kept small and documented.
Security layer
Security layer, 8 cards.
How the contracts limit what anyone can do, and what has not been reviewed yet.
- Fixed SupplyNo mint, owner, pause or upgrade
- Security ReviewPhase 2 in progress
- External AuditNot performedNone
- Treasury Timelock48-hour minimum delay
- Vesting ContractsBeneficiary fixed at deployment
- TestingUnit, fuzz, invariant, static analysis
- Open Source FoundationAudited libraries, pinned
- Report a VulnerabilityPrivate disclosure