Audit

Status: audit pending. Lockkeeper's contracts are being audited. This page will link the final report and every finding's resolution before mainnet launch.

What's in scope

CurveRouterHook — the Uniswap v4 hook
PonsV2Adapter — the Pons V2 curve adapter
AdapterRegistry, TokenRegistrar
FeeController, FeeVault

Testing so far

Unit and fuzz tests for every swap path and guard
Invariant tests: the hook ends every transaction with a zero balance, and the vault's balance always equals claimable plus protocol fees
Attack tests: reentrancy, exact-output, expired deadlines, impact-cap evasion, graduation edge cases
Fork tests against Pons on Robinhood Chain

Reporting a bug

Email security reports to security@uselockkeeper.site. Please don't open public issues for vulnerabilities. A bug bounty will be announced with the audit report.