Security · 05 / 08
Vesting Contracts
Vesting wallets release tokens only on their schedule. The beneficiary cannot be changed and there is no administrator who can withdraw unvested tokens.
Security layer
Security layer, 8 cards.
How the contracts limit what anyone can do, and how they are checked.
- Fixed SupplyNo mint, owner, pause or upgrade
- Security AuditCompleted 17 Oct 2026, findings closed
- Bug BountyOpen, paid in ARLUp to 40,000 ARL
- Treasury Timelock48-hour minimum delay
- Vesting ContractsBeneficiary fixed at deployment
- TestingUnit, fuzz, invariant, static analysis
- Open Source FoundationOpenZeppelin libraries, pinned
- Report a VulnerabilityPrivate disclosure