Security & Trust
Security is not a feature — it is the foundation. Full transparency on our audit trail, methodology, and responsible disclosure process.
Auditor: Trail of Bits
Consensus layer, validator set management, IBC module, state machine logic
Auditor: CertiK
CW20 token contract, minting logic, transfer restrictions, vesting schedule
Auditor: Halborn
Multi-sig wallet contracts, staking module, cross-chain bridge logic
Auditor: Quantstamp
Proof-of-Training consensus, Proof-of-Execution verification, IPFS integration
Auditor: OpenZeppelin
On-chain voting mechanism, treasury management, proposal lifecycle
All protocol-level private keys are managed via multi-party computation (MPC) with threshold signing. No single party holds complete key material.
EmpoorioChain, CosmWasm contracts, and SDK tooling are fully open source. Security researchers worldwide can inspect, audit, and contribute.
Active bug bounty program with rewards up to $50,000 for critical vulnerabilities across all Empoorio smart contracts and protocol code.
Critical state machine transitions and consensus logic are formally verified using the Coq proof assistant before deployment to mainnet.
24/7 on-call security rotation with defined escalation procedures, circuit breakers, and coordinated disclosure policies.
All third-party dependencies are pinned, audited, and reviewed at each major release cycle. Supply chain integrity verified via SBOM.
Responsible Disclosure
We reward security researchers who responsibly disclose vulnerabilities in Empoorio smart contracts, protocol code, and infrastructure.
security@empoorio.org →Critical
Remote code execution, consensus manipulation, fund theft
High
Privilege escalation, validator slashing bugs, token inflation
Medium
DOS vectors, oracle manipulation, access control issues
Low
UI bugs, informational disclosures, minor logic errors
