Security & audits

Audits

The v2 contracts have been through multiple independent audit rounds, with reports published in the public repository next to the code:

Round	Scope
1	Core protocol: market, vaults, oracle verification
2	PSM, reserve vaults, lending stack
3	Chainlink oracle migration
4	Stablecoin branch: eUSD CDP engine, sEUSD staking

All deployed contracts are verified on Blockscout; addresses are on the contract addresses page.
The full source, test suite (unit, fuzz, invariant), and deploy scripts are public at github.com/own-protocol/own-v2.

Layer	Mechanisms
Signature abuse	EIP-712 domains bound to chain and contract, seconds-scale expiry, single-use quotes, monotonic oracle sequence numbers
Price manipulation	Chainlink anchors, deviation bands (5% to 8%), settle band ±5%, freshness windows, no trade-price oracles
Issuance risk	Global utilization cap, per-asset caps, solvency check on every mint, debt ceiling on eUSD
Vault safety	Share-less protocol reserves separated from LP equity, ratio-jump guard, exit clamps, dead-shares seeding on sEUSD, OZ virtual-shares defense
Emergency response	Trading pause (reversible), asset halt (funded permanent wind-down), independent eUSD mint pause; exits ungated in every state

Report vulnerabilities privately through the security contact in the contracts repository rather than a public issue.