Audit Reports
Smart contract security audits
Document Version: 1.0
Last Updated: January 2026
Security is Zetarium's top priority. All smart contracts undergo rigorous third-party security audits before mainnet deployment. This page provides transparency into our security practices and audit history.
Zetarium works with leading blockchain security firms:
| Auditor | Expertise | Website |
|---|
| Certik | Smart contract security, formal verification | certik.com |
| Coinsult | DeFi protocol audits | coinsult.net |
| Parameter | Details |
|---|
| Auditor | Coinsult |
| Date | Q3 2025 |
| Scope | Swap execution, token handling, fee mechanism |
| Findings | All critical issues resolved |
| Status | Passed |
| Parameter | Details |
|---|
| Auditor | Coinsult |
| Date | Q3 2025 |
| Scope | Pool creation, reward distribution, emergency functions |
| Findings | All critical issues resolved |
| Status | Passed |
| Parameter | Details |
|---|
| Auditor | Coinsult |
| Date | Q3 2025 |
| Scope | Token sales, vesting logic, claim mechanism |
| Findings | All critical issues resolved |
| Status | Passed |
| Parameter | Details |
|---|
| Auditor | In Progress |
| Date | Q1 2026 |
| Scope | Market creation, oracle system, settlement logic |
| Status | In Progress |
| Measure | Implementation |
|---|
| Reentrancy Guards | OpenZeppelin ReentrancyGuard on all state-changing functions |
| Access Control | Role-based permissions with Ownable2Step |
| Safe Math | Solidity 0.8+ native overflow protection |
| Safe Transfers | SafeERC20 for all token operations |
| Measure | Implementation |
|---|
| Multi-Signature | Treasury and admin functions require multiple signatures |
| Timelock | Critical parameter changes have mandatory delay |
| Emergency Pause | Ability to pause contracts in case of emergency |
| Rate Limiting | Protection against flash loan attacks |
Zetarium operates an active bug bounty program to incentivize responsible disclosure.
| Severity | Reward Range |
|---|
| Critical | Up to $50,000 |
| High | Up to $20,000 |
| Medium | Up to $5,000 |
| Low | Up to $1,000 |
| In Scope | Out of Scope |
|---|
| Smart contracts | Frontend issues |
| Core protocol logic | Third-party integrations |
| Oracle mechanisms | Social engineering |
| Access control | DoS attacks |
- Discover vulnerability
- Document with proof of concept
- Submit via official security contact
- Allow 48 hours for initial response
- Coordinate disclosure timeline
- Receive bounty after fix deployment
In case of a security incident:
- Detection: Automated monitoring alerts team
- Assessment: Severity evaluation within 1 hour
- Containment: Emergency pause if necessary
- Communication: User notification within 24 hours
- Resolution: Fix deployment and verification
- Post-Mortem: Public report on incident and response
For security-related inquiries:
Zetarium is committed to maintaining the highest security standards. We continuously improve our security practices based on industry developments and community feedback.
