…

scheduled before mainnet. the report links from this page once cleared.

extensive automated testing and static analysis run on every change before it ships.

funds move by pull payments, royalties are capped, and there is no always-on automation key — sensitive actions are deliberate, owner-signed transactions.

single-key custody by design — no multisig. it ships with pause and emergency safeguards and standard owner rotation on every contract.

the treasury holds HYPE only — NFTs never sit there. burns are a deliberate two-step action: a compromised or buggy sweep cannot destroy anything without a separate, explicit owner signature. once confirmed, a burn is permanent.