Security Model

Trust is engineered, not assumed. GLACIER operates on a strictly non-custodial, immutable execution layer.

Threat Model & Constraints

Irreversible Routing

Once fees enter the protocol vault, they cannot be withdrawn by any admin key. They can only be routed to the Engine or Staking contracts.

Transparent Execution

All reinforcement trades are emitted as on-chain events. The schedule is public 24h in advance.

Anti-Rug Constraints

Upgradeability is governed by a 48h timelock. Max slippage is hardcoded to 1%.

Audits & Verification

Core Protocol Audit

Firm: TBA

Pending

Engine Logic Audit

Firm: TBA

Pending

Bug Bounty Program

We incentivize whitehats to secure the Snowball Framework. Bounties up to $100,000 for critical vulnerabilities.