Audits
No vault opens to deposits until the audit status is published here, including the exact code version it covers.
| Scope | Auditor | Status |
|---|---|---|
| Vault contracts | Internal review | Fixed |
Contracts
These are the only official addresses. If an address isn't on this list, it isn't ours. Check before you approve anything.
| Contract | Address | Status |
|---|---|---|
| Stoktide token (CA) | TBA↗ |
Pre-launch |
| Vaults | TBA | Not deployed |
| USDG (Paxos) | 0x5fc5360D0400a0Fd4f2af552ADD042D716F1d168 | External |
Chainlink price feeds
Each vault prices its Stock Token with the feed below. Addresses are the proxy contracts from Chainlink's Robinhood Chain directory; check them there before relying on them.
| Feed | Proxy address | Decimals |
|---|---|---|
| NVDA / USD | 0x379EC4f7C378F34a1B47E4F3cbeBCbAC3E8E9F15 | 8 |
| AAPL / USD | 0x6B22A786bAa607d76728168703a39Ea9C99f2cD0 | 8 |
| TSLA / USD | 0x4A1166a659A55625345e9515b32adECea5547C38 | 8 |
| MSFT / USD | 0x45C3C877C15E6BA2EBB19eA114Ea508d14C1Af2E | 8 |
| AMZN / USD | 0xD5a1508ceD74c084eBf3cBe853e2C968fB2a651C | 8 |
| META / USD | 0x7C38C00C30BEe9378381E7B6135d7283356D71b1 | 8 |
| GOOGL / USD | 0xF6f373a037c30F0e5010d854385cA89185AE638b | 8 |
| AMD / USD | 0x943A29E7ae51A4798823ca9eEd2ed533B2A22C72 | 8 |
| PLTR / USD | 0x820ABedFF239034956B7A9d2F0a331f9F075eB4c | 8 |
| COIN / USD | 0xA3a468A452940B7D6b69991207B508c609a98Ef2 | 8 |
| SPY / USD | 0x319724394D3A0e3669269846abE664Cd621f9f6A | 8 |
| USDG / USD | 0x61B7e5650328764B076A108EFF5fa7282a1B9aD2 | 8 |
Safeguards
- Oracle-priced deposits. Shares are minted at the Chainlink value, so moving the pool price doesn't mint cheaper shares.
- Pool deviation check. Deposits and recentres revert if the pool is more than 0.3% away from the oracle. That blocks buying in at a lagging price and limits what a sandwich can take.
- Deposit fee. 0.15%, paid into the vault, so stale-price arbitrage doesn't pay.
- Rate-limited recentres. Only when needed, at most once every 10 minutes.
- Stale feed and sequencer checks. Old prices and a down sequencer block deposits and recentres instead of guessing.
- Deposit caps. Each vault starts with a low cap that rises only as it proves itself.
- Exits can't be paused. Pausing stops deposits and recentres. Withdrawals always stay open, and if a token is frozen for your address, the rest still pays out and the frozen part waits for you to claim.
- Bounded admin. Every owner setting has a hard limit in code and emits an event when changed.
Bug bounty
A formal bounty with fixed payouts opens alongside the audit. Until then, if you find a vulnerability:
- Send it privately via DM on X. Don't post it publicly or test it against live funds.
- Include the contract, what goes wrong, and a way to reproduce it.
- We aim to reply within 72 hours, and credit you publicly if you'd like.