Security

Security & Audits

Topaz is built with security as a primary design constraint. Smart contracts follow battle-tested patterns from the Aerodrome/Velodrome lineage, with targeted enhancements.

Contract Architecture

Core contracts use standard OpenZeppelin implementations for:

✓Reentrancy guards on all external calls
✓Pausable admin functions
✓Access control on upgradeable components
✓Safe math / overflow protection
✓Event indexing for off-chain aggregation

Admin Controls

Certain protocol parameters are controlled by a multi-signature wallet. These include gauge creation, emergency pauses, and custom fee management. The full admin matrix will be published at launch.

ℹTimelock

Major protocol changes (fee rate adjustments, new gauge categories) are subject to a timelock delay to give users advance notice before execution.

Audits & Reviews

Topaz contracts have been reviewed against the Aerodrome/Velodrome codebase with targeted diff analysis for custom changes. Audit reports will be published prior to mainnet launch.

Risk Disclosure

DeFi involves inherent risks including:

Smart contract risk — code may contain vulnerabilities
Impermanent loss — LP positions may lose value vs. holding
Governance risk — protocol parameters may change unfavorably
Oracle risk — TWAP price feeds can be manipulated
Regulatory risk — applicable to your jurisdiction

Participants should conduct their own research and never commit more than they can afford to lose.