SECURITY
Security and audits
Audits + contracts before launch. Security over speed.
Audit reports
StatusScheduled
ScopeForgeSession · ForgeSpot · ForgeOrders · ForgeExecutor · ForgeFeeVault · UniswapAdapter
PDFDownload here after publication
Bug bounty
ScopeThe contracts above + the official frontend
RewardsBy severity: Low / Medium / High / Critical (details with the audit)
SubmissionNot open yet; channel announced after the audit

Do not disclose unfixed vulnerabilities in public.

Multisig and permissions
Protocol multisig3/5 · addresses announced at deployment
GuardianHot wallet · pause only, never change
Parameter-change timelock48 hours
Contract upgradesMultisig + timelock
What the pause switch can pause
  • ✅ Blocks order creation and execution (swapExact / create* / executeOrder)
  • ✅ Lists/delists adapters and tokens (timelock)
  • ❌ Cannot cancel your orders (cancellation is always available)
  • ❌ Cannot stop you from revoking a Session
  • ❌ Cannot move user funds (contracts never hold user funds long-term)
Incident history

None to date.If an incident occurs, it will be recorded here honestly: time, impact scope, handling, and improvements.