What keeps the vault safe?
In the contract:
- Only the operator can swap.
- Only allowed routers can be called.
- Every swap checks
minOut. - Reentrant calls are blocked.
- The owner can pause at any time.
- The owner change takes two steps.
- Odd tokens with no return value are handled.
In the engine:
- Live mode is off until every check passes.
- No trade on stale data.
- Each order is capped by depth and by equity.
- A hard stop closes a losing position.
- Secrets are never printed or logged.
What is not done:
- No audit has been done.
- The vault is not deployed.
- The vault is not funded.
Sample
Section titled “Sample”A bad router is not on the allowlist. The swap call reverts. No token moves.