Security & Audits

Security is our top priority. USX.Capital implements four independent security layers: professional audits, formal verification, emergency controls, and insurance reserves.

Professional Security Audits

Mainnet Smart Contract Audit

Auditor: Zellicarrow-up-right

Date: October 2, 2025

Result: No critical or high-severity vulnerabilities identified

The audit covered all mainnet smart contracts responsible for minting, redemption, collateral management, and yield distribution. All low and informational issues identified were thoroughly reviewed and remediated during the audit process before mainnet deployment.

Pre-Deposit Contract Audit

Auditor: Zellicarrow-up-right

Date: October 2, 2025

Result: No critical, high, medium, or low-severity vulnerabilities

During the audit of pre-deposit contracts, Zellic identified one informational-level issue. No functional vulnerabilities were reported, and the issue was addressed before deployment.

Blend Protocol Audits

Auditor: Multiple firms

Audits Completed: 8 independent audits

Result: No critical, high, medium, or low-severity issues found

Blend (the yield infrastructure layer used by USX) has undergone 8 independent security audits by leading blockchain security firms. Find their complete audit reports here: https://docs.blend.money/resources/auditsarrow-up-right


Additional Security Features

Formal Verification

Critical protocol components undergo formal verification.

Emergency Pause Function

A dedicated pause mechanism stops all fund movement if a security threat is detected. This allows the team to:

  • Halt minting and redemptions

  • Pause yield distributions

  • Prevent further damage while investigating issues

Dedicated Insurance Fund

5% of all generated protocol yield is pooled into an onchain insurance fund. This reserve:

  • Covers emergency scenarios

  • Protects sUSX holders from losses

  • Strengthens long-term protocol stability


Common Questions

Q: What does "no critical vulnerabilities" mean?

A: It means auditors found no flaws that could cause immediate loss of funds or protocol failure. Low and informational issues are non-urgent and don't affect security.

Q: Are audits a guarantee of safety?

A: Audits significantly reduce risk but don't guarantee zero exploits. They're point-in-time reviews. USX adds formal verification, pause mechanisms, and insurance for additional protection.

Q: Can I see the full audit reports?

A: Yes. Zellic audit summaries are available above. Blend's complete reports are published at docs.blend.moneyarrow-up-right.

For a complete risk analysis, see Core Protocol Risksarrow-up-right and External & Operational Risksarrow-up-right.

Last updated