Security

Security & Transparency

At Orenium, security is our top priority. Learn about our security practices, audits, and risk management approach.

Audit Status

Our smart contracts are undergoing security audits by leading firms.

Audit FirmTarget DateStatusScopeReport
Security Firm AQ1 2025In ProgressCore Protocol, VaultsPending
Security Firm BQ2 2025ScheduledYield Router, SwapPending

Bug Bounty Program

We reward responsible disclosure of security vulnerabilities. Help us keep Orenium safe.

Critical Vulnerabilities

Up to $100,000

Fund loss, protocol compromise

High Severity

Up to $25,000

Significant protocol disruption

Medium/Low Severity

Up to $5,000

Minor issues, edge cases

Report a Vulnerability

Please report security issues responsibly. Do not disclose publicly until we've had a chance to address the issue.

Email

security@orenium.io

Please include detailed steps to reproduce, potential impact, and any supporting materials.

Risk Disclosures

Using DeFi protocols involves inherent risks. Please understand these before participating.

Smart Contract Risk

Despite audits and testing, smart contracts may contain vulnerabilities. Only deposit what you can afford to lose.

Mitigation

Multiple audits, formal verification, bug bounty program

Oracle Risk

Oracle failures or manipulation could affect pricing and vault operations.

Mitigation

Multi-oracle aggregation, circuit breakers, price deviation thresholds

Market Risk

Extreme market conditions may affect yield generation and capital efficiency.

Mitigation

Diversified strategies, automatic rebalancing, conservative limits

Protocol Risk

Integrated protocols may experience issues affecting Orenium strategies.

Mitigation

Protocol whitelisting, continuous monitoring, quick response procedures

Transparency Commitments

Our promise to the community.

All smart contracts are open source and verifiable
Real-time monitoring and alerting systems
Gradual rollout with conservative limits
Transparent communication of any incidents
Regular security reviews and updates
Community-driven governance for major changes

Security Contact

For security-related inquiries or to report vulnerabilities, please contact us at:

security@orenium.io