Security & audits
Audits
The v2 contracts have been through multiple independent audit rounds, with reports published in the public repository next to the code:
| Round | Scope |
|---|---|
| 1 | Core protocol: market, vaults, oracle verification |
| 2 | PSM, reserve vaults, lending stack |
| 3 | Chainlink oracle migration |
| 4 | Stablecoin branch: eUSD CDP engine, sEUSD staking |
| 5 | eUSD go-live (18 October to 1 November 2026): multi-collateral EUSDManager, ChainlinkOracleVerifier, fixed-APR StakingVault, ProtocolRegistry, MoneyFeeCollector |
Reports: github.com/own-protocol/own-v2/tree/main/audits
Reports for contracts that are no longer on main (the OwnX core and the first eUSD release) are on the legacy-own-v2 branch.
Verification
- All deployed contracts are verified on Blockscout or robin.etherscan.io; addresses are on the contract addresses page.
- The full source, test suite (unit, fuzz, invariant), and deploy scripts are public at github.com/own-protocol/own-v2.
Defense in depth, summarized
| Layer | Mechanisms |
|---|---|
| Signature abuse | EIP-712 domains bound to chain and contract, seconds-scale expiry, single-use quotes, monotonic oracle sequence numbers |
| Price manipulation | Chainlink anchors, deviation bands (5% to 8%), settle band ±5%, freshness windows, no trade-price oracles |
| Issuance risk | Global utilization cap, per-asset caps, solvency check on every mint, a debt ceiling per eUSD risk group |
| Vault safety | Share-less protocol reserves separated from LP equity, ratio-jump guard, exit clamps, dead-shares seeding on sEUSD, OZ virtual-shares defense |
| Emergency response | eUSD mint pause per manager, collateral disable, oracle signer removal; on OwnX, trading pause and asset halt; exits ungated in every state |
Responsible disclosure
Report vulnerabilities privately through the security contact in the contracts repository rather than a public issue.