Skip to main content

Security & Audits

At Alchemix, security is foundational. With every major protocol upgrade—including Alchemix V3—we prioritize rigorous testing, independent audits, and transparent processes to protect users and partners alike.

✅ Audit Coverage​

All core Alchemix V3 smart contracts have undergone comprehensive audits by top-tier security firms. These audits include:

  • Audit Firms:

    • [Audit Firm 1] – [Date]
    • [Audit Firm 2] – [Date]
    • [Ongoing audit(s) or re-audits if applicable]

  • Audit Reports:

    • [Link to Report 1]
    • [Link to Report 2]
    • [GitHub or IPFS mirror if preferred]

Note: We strongly recommend reviewing the latest reports for full technical details and findings.

🧪 Internal Security Practices​

In addition to third-party audits, Alchemix V3 benefits from internal security processes such as:

  • Extensive Testing: Full unit test coverage and invariant testing suites.
  • Formal Verification: Applied where appropriate for high-value components.
  • Code Reviews: Multi-stage reviecope here.

🔄 Upgradeability & Timelocks​

  • Smart Contract Upgradeability:
    Key contracts may be upgradeable via governance. All upgradeable components are subject to multisig control and/or on-chain timelocks.

  • Timelock Details:

    • Minimum delay: [X hours/days]
    • Managed by: [DAO multisig / Governance]

📢 Ongoing Security​

We continuously monitor and improve the protocol through:

  • Regular re-audits for new features.
  • Integration-specific reviews for ecosystem partners.
  • Transparent disclosures and community engagement on risk.

Resources​

🛡 Bug Bounties​

We encourage responsible disclosure through our bug bounty program, operated via Immunefi.

  • Max bounty: Up to $300,000 depending on severity.
  • Scope: You can check the full s