Security

What has been checked, and what you still carry.

Our audits, contracts and wallet practice, and the risks that remain with you.

Audits

Audited by PeckShield.

AutoLayer was formerly Tortle Ninja. The Tortle Ninja contracts were audited by PeckShield, and the report is public.

New AutoLayer contracts go through audit as they ship. Final reports are published on this page.

The report covers the Tortle Ninja v1.0 contracts.

On-chain

AutoLayer contract on Arbitrum: 0x8899b5…969Da50x8899b5139155f9Ee070597000149F71a4A969Da5; View on Arbiscan
Security incidents: None reported.
Deployment: Arbitrum (live since August 2023, first as Tortle Ninja) and BNB Chain.

Wallets and incentives

No team wallets. Team-controlled wallets are excluded from all milestone metrics and incentives.
Multisig funding. Incentive funding sits in an institutional-grade, physically secured multisig wallet, which can halt the funding stream.
Blacklisted wallets. Wallets tied to transactions with the Arbitrum DAO or its members are blacklisted from incentives, points and tokens. Suspicious wallets are excluded, and no wallet may take more than 1% of incentives.

Risks

Nothing on this site is financial advice. Only commit what you can afford to lose.

Audits reduce risk but do not remove it. A bug in AutoLayer, in an integrated protocol or in an LRT issuer's contracts could lead to loss of funds.

LRTs can serve as collateral for leveraged looping. A sudden depeg could trigger automatic liquidations and leave bad debt in money markets.

Restaked assets can be penalized if an AVS or operator breaks its rules. Slashing protection is part of the V2 roadmap.

Prices, routes and scores depend on external data and on liquidity at the time of your trade. Stale or manipulated data can produce bad outcomes.

Slashing protection is on the roadmap. A V2 bounty contract halts validation of an AVS before a slashing event reaches stakers.

Report it privately through the contact form with the topic Security disclosure.