> For the complete documentation index, see [llms.txt](https://leveracc.gitbook.io/leveracc-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://leveracc.gitbook.io/leveracc-docs/security/security-and-audits.md).

# Security & Audits

## Design principles

* **Non-custodial.** Only the user's own wallet can authorize borrowing, repayment and withdrawals. Partner execution wallets and LeverAcc risk wallets cannot withdraw funds.
* **On-chain truth.** Debt, interest, limits and settlement are enforced by contracts on HyperEVM. LeverAcc's off-chain services only operate on top of on-chain state.
* **Least privilege.** Trading, risk, governance, emergency and signing roles are separated. Service signers are checked against on-chain roles at startup, and services refuse to start if the deployment does not match.
* **Fail closed.** When HyperCore state cannot be read reliably, risky actions are refused rather than guessed.
* **Replay-safe intents.** Every signed intent is bound to chain, account, project, user, nonce and expiry, and can be used once.
* **Audited governance.** Every control-plane change goes through create → approve → execute, with who requested, approved and executed it recorded.

## Testing

* Foundry unit, invariant and fuzz tests (including Echidna) for the contracts
* End-to-end tests against Hyperliquid testnet and a live-network harness
* A release gate on every contract release: storage layout, contract size, ABI/selector routing, event coverage, security properties and Slither static analysis
* Funded canary runs on testnet and mainnet for each account-logic upgrade, covering borrow, trade, repay, every withdrawal path and settlement

## Audits

* **September 2026**: AI-assisted security audit of the HyperEVM contracts. Findings were fixed or tracked as release gates.
* An independent third-party audit is planned before opening to the public.

## Emergency controls

* Protocol **Frozen** mode
* Account-level withdrawal restriction
* Vault pause switches (borrow, supply, redeem)
* Execution-wallet revocation and recovery

## Report a vulnerability

Contact the team via Telegram ([t.me/leveracc\_fans](https://t.me/leveracc_fans)) or GitHub ([MetaStellar-Tech](https://github.com/MetaStellar-Tech)). Please do not disclose publicly before we have had a chance to respond.