11. Risk Management
Security is paramount. We are building financial infrastructure, and trust is our most valuable asset.
1. On-Chain Program Security
- Multiple Audits: All Solana programs undergo at least two independent audits by firms with dedicated SVM expertise (e.g., OtterSec, Neodyme, Trail of Bits) before deployment.
- Bug Bounty: An active bug bounty program on Immunefi with rewards up to $100,000 for critical vulnerabilities.
- Timelock: All program upgrades are routed through a governance-controlled upgrade authority with a 48-hour timelock, allowing the community to review changes before they go live.
- Token-Level Immutability: The ELDR mint requires no trust at all. Mint and freeze authorities are already revoked, which removes the two most severe token-level risks — supply dilution and account freezing — from the threat model entirely.
2. Treasury Management
- Multisig Wallets: All treasury funds are secured by Squads 5-of-7 multisig wallets, the standard for institutional custody on Solana. Signers include team members and independent industry leaders.
- Asset Diversification: Treasury assets are diversified into stablecoins (USDC), SOL, and BTC to hedge against volatility.
3. Operational Risk
- Doxxed Team: The core leadership team is public, ensuring accountability.
- Legal Compliance: Eldranium Protocol Inc. works with top-tier legal counsel to ensure compliance with global regulations (MiCA, SEC, etc.).
