ClutchMarkets

lutch.AMM is a **permissionless NFT liquidity protocol** deployed on **ApeChain** and **Ethereum Mainnet**. Markets can be deployed as either single-collection or multi-collection configurations. In multi-collection markets, collections share one token + escrow while each linked collection keeps its own AMM/loan/staking vault set. Linked collections are immutable after deployment. The core idea: each market defines a fixed base exchange ratio (`tokensPerNFT`) between NFTs and its market token. The AMM quotes buys/sells around that base with fee logic. Borrowers can lock NFTs and receive market tokens immediately. Stakers earn a share of swap fees generated in the same market. | Component | What it does | | ------------------ | --------------------------------------------------------------------------------------------------- | | AMMFactory | Deploys and registers single + multi-collection markets | | CollectionToken | ERC-20 (+ EIP-2612 Permit) representing one market (shared across linked collections in multi mode) | | TokenEscrowReserve | Holds minted supply; releases tokens through bucket-gated paths | | NFTAMMVault | NFT↔Token swaps: sell, random buy, specific buy | | LoanVault | Borrow tokens against locked NFT collateral | | NFTStakingVault | Stake NFTs to earn a share of swap fees | | BatchRouter | Execute multi-NFT operations in a single transaction | ### Key Properties * →No token release outside deterministic, audited paths. * →Global solvency invariant checked on every release. * →Pausable fail-safe for critical paths. Protocol admin holds PAUSER\_ROLE and DEFAULT\_ADMIN\_ROLE for emergency controls. * →Most market parameters are immutable after deployment. Swap fees may be adjusted via on-chain governance if the market was deployed with governance enabled. * →Random buy selection uses on-chain FIFO inventory ordering (oldest deposited first). ## AMM & Swapping The NFTAMMVault maintains an inventory of NFTs and a corresponding token balance. Prices are derived from the floor price of NFTs already deposited. When you sell an NFT, the vault mints/releases tokens from the escrow reserve and delivers them to you (minus fees). When you buy, you pay tokens and receive an NFT from inventory. ### Sell an NFT Deposit your NFT into the vault and receive market tokens immediately. The payout equals the floor price minus swap fees. No slippage risk: set a `minPayout` floor to protect against last-second price movement. sellNFT(uint256 tokenId, uint256 minPayout) → Reverts: SlippageExceeded if payout \< minPayout → Reverts: NotOwner / NotApproved / WrongCollection ### Buy Random NFT Pay market tokens to receive a random NFT from the vault's inventory. Random selection uses FIFO inventory ordering on-chain (oldest deposited, first bought). The market's swap fee (randomFeeBps, configurable 1–15%) applies. buyRandomNFT(uint256 maxCost) → Reverts: EmptyInventory / SlippageExceeded if cost > maxCost ### Buy Specific NFT Pay a higher fee (specificFeeBps, which must be ≥ randomFeeBps) to select a specific NFT from the vault by token ID. This prevents gaming the rarity floor while still allowing targeted buys for collectors. buySpecificNFT(uint256 tokenId, uint256 maxCost) → Reverts: NotInInventory / SlippageExceeded ### Fee Structure | Operation | Staker Fee | Protocol Fee | Total | | -------------- | ------------------------------- | ------------ | --------------------- | | Sell NFT | randomFeeBps (1–15%) | 0.5% | randomFeeBps + 0.5% | | Buy Random NFT | randomFeeBps (1–15%) | 0.5% | randomFeeBps + 0.5% | | Buy Specific | specificFeeBps (≥ randomFeeBps) | 0.5% | specificFeeBps + 0.5% | The protocol fee is fixed at **0.5%** on all operations. Staker fees (`randomFeeBps`, `specificFeeBps`) are set per market at deployment and distributed to stakers proportionally to their NFT stake weight. Protocol fees go to the Clutch DAO treasury. ## Borrowing Lock your NFT as collateral and receive market tokens instantly. The loan is fixed-term: you choose a duration between 1 and 365 days. Interest accrues at the market's fixed APY. Repay the principal plus accrued interest before the grace period ends to retrieve your NFT. ### How it works * →Open a loan: your NFT is escrowed in the LoanVault for the loan duration. * →Receive tokens: principal is released from the Loan bucket of the escrow reserve. * →Repay: return principal + interest before maturity + 7-day grace period. * →NFT returned: once repayment is confirmed, your NFT is released back to your wallet. * →Liquidation: if unpaid after the grace period, any address can liquidate and earn a 2% incentive. ### Loan Parameters | Parameter | Value | | ------------ | ---------------------------------------- | | Borrow APY | Set per market at deployment (immutable) | | Min Duration | 1 day | | Max Duration | 365 days | | Grace Period | 7 days after maturity | | Liquidation | Permissionless after grace period | | Max LTV | 100% (1 NFT \= principal equal to floor) | Failure to repay within the 7-day grace period results in permanent loss of your NFT. Set calendar reminders before your maturity date. ### Contract Signatures borrow(uint256 tokenId, uint256 duration) → Reverts: DurationTooShort / DurationTooLong / MaxLoansExceeded repay(uint256 loanId) → Repays principal + interest; returns NFT → Reverts: LoanNotActive / NotBorrower liquidate(uint256 loanId) → Permissionless after grace period; caller receives 2% incentive → Reverts: GraceNotExpired / LoanNotActive getLoanDetails(uint256 loanId) → Returns borrower, tokenId, principal, maturity, graceDeadline, status ## Staking & Rewards Deposit your NFTs into the NFTStakingVault to earn a continuous share of all swap fees generated by the market. Rewards accumulate in real-time and can be claimed at any time as market tokens. ### Reward Sources | Source | Staker Share | Notes | | ----------------- | ------------------- | ------------------------------ | | Random buy fees | Random-fee bucket | Distributed every block | | Specific buy fees | Specific-fee bucket | Higher fee rate (≥ random fee) | | Sell fees | Random-fee bucket | Distributed every block | ### Staking Lifecycle * →Stake: transfer NFT into the staking vault. Start accumulating rewards immediately. * →Claim: call claimRewards() at any time to receive accumulated market tokens. * →Unstake: call unstake(tokenId) after the 24-hour cooldown has elapsed. * →Return: unstake transfers your NFT back to your wallet in the same transaction. stake(uint256 tokenId) unstake(uint256 tokenId) // requires cooldown to be elapsed claimRewards() // claim accumulated market tokens pendingRewards(address user) Your reward share is proportional to your staked NFT count vs. the total staked supply. More staked NFTs → higher share of the fee stream. ## K9 Bridge & The Hammer **The Hammer** is the cross-chain hub inside every Pixel Pups market page. It combines three features: the **LayerZero V2 bridge** (Ethereum ↔ Solana), the **K9 token staking vault** (ETH mainnet), and the **Solana staking program**. All three share the same UI tab. ### K9 Token | Chain | Token / Mint | Symbol | | ------------------- | -------------------------------------------- | ------ | | Ethereum Mainnet | 0xbc920c7Fa25D3Cd5606394aa4C6751d71DCb7930 | K9 | | Solana mainnet-beta | 5je5ondjVJcHjWz2v4mLZn7PsQGr47XQFjFTfrtCu1ox | K9 | The Solana SPL mint was redeployed on 2026-05-08 with full Metaplex metadata so Phantom, Solflare, and Jupiter render the name, symbol, and logo correctly. Supply: 1.123 B at 9 decimals, mint + freeze authority both permanently revoked. ### LayerZero V2 Bridge The bridge uses two EVM contracts and one Solana Anchor program to move K9 between chains. DVN policy: **Canary + Nethermind** (2-of-2 required). All packets enforce a 40-byte codec: `bytes32 recipient | uint64 amountSd`. | Contract / Program | Address | Chain | | ------------------------------ | -------------------------------------------- | ---------- | | ETHEscrowVaultV2 (lock/bridge) | 0xfC2c93C9ADB7B0B93FA67B3aAfEcD74538887b00 | Ethereum 1 | | LZBridgeAdapterV2 | 0x42BAb297f90e6285546F05abdF4C42D8415E9794 | Ethereum 1 | | k9-escrow (Anchor, v2) | DuwVxzTcYrXrBJWKeHeJp4H9PAF8pQbEqpNhrUpyYub1 | Solana | | Escrow state PDA | GqiSB8wpHbf9fxiWiTe4AqeTCx552DjRjWsfmREtEcpS | Solana | Sending **ETH → SOL**: connect an EVM wallet on Ethereum Mainnet and enter the destination Solana address. K9 is locked in `ETHEscrowVaultV2` and a LayerZero V2 message is dispatched. The DVN attests → executor delivers → Solana escrow program mints/releases K9 to the recipient. Sending **SOL → ETH**: connect Phantom on Solana mainnet-beta and enter the destination EVM address. The Anchor program burns/locks K9, sends an LZ packet, and the ETH escrow vault releases K9 to the EVM recipient upon delivery. Bridge fees: 100 bps (1%) source fee on both directions. The fee is taken in K9 before the LayerZero native gas fee is applied. Average bridge time is 2–5 minutes (DVN + executor latency). Both wallets (EVM + Solana) must be connected before the bridge panel unlocks submit. ### K9 Staking Vault (Ethereum) K9 holders can lock tokens in the **K9StakingVault V2** on Ethereum Mainnet to earn fee-funded rewards. The vault receives 75% of bridge source fees and DPP liquidity-module yields; the remaining 25% goes to the treasury. | Lock Tier | Duration | Multiplier | Notes | | --------- | -------- | ---------- | ------------------ | | 0 | 7 days | 1.00× | Minimum lock | | 1 | 30 days | 1.25× | | | 2 | 90 days | 1.60× | | | 3 | 180 days | 2.20× | Maximum multiplier | | Contract | Address | Chain | | ----------------- | ------------------------------------------ | ---------- | | K9StakingVault V2 | 0x4C29D80e37f90d2BAf595F5d4cF1556506F9861b | Ethereum 1 | | K9FeeRouter V2 | 0x1D7702F4dCfAe6B41B45BFf428F75434FeC4d3A1 | Ethereum 1 | **Pixel Pups NFT Boost**: staking Pixel Pups into the upstream NFTStakingVault adds up to **+25% APY boost** on every K9 position (\~0.83% per Pup, capped at 30 Pups). The boost is snapshotted on stake / top-up. Call *Refresh Boost* to apply a new boost to existing positions without adding tokens. // K9StakingVault V2 key functions stake(uint256 amount, uint8 lockTier, bool degenOptIn) addToPosition(uint256 positionId, uint256 amount) requestUnstake(uint256 positionId) completeUnstake(uint256 positionId) claimRewards() calculateBoost(address user) → uint256 boostBps refreshAllBoosts(address user) // Lock tiers (read live, fallback values): lockDurations(uint8 tier) // in seconds lockMultipliersBps(uint8 tier) // e.g. 12500 \= 1.25× ### The Hammer UI — Staking Breakdown Panel The bottom of The Hammer tab shows a **Staking Breakdown** table that renders in real-time from the connected wallet: * →Your K9 staked per lock tier (7d / 30d / 90d / 180d) with position counts. * →Estimated APY per tier \= poolApyPct × lockMultiplier × (1 + NFT boostBps / 10 000). * →Your total K9 staked and USD equivalent (when price feed is available). * →Protocol TVL across all stakers. The **Pixel Boost Actions** panel (visible when Pixel Pups staking is wired) surfaces: current staked Pup images, total boost multiplier badge, a one-click *Claim K9 Rewards* button, and an inline *Stake More Pups* picker that scans the wallet, requests NFT approval if needed, and stakes Pups into the NFTStakingVault in a single flow. ### K9 Staking (Solana) The Solana tab in The Hammer connects to the **k9-staking Anchor program**. Phantom must be connected to Solana mainnet-beta. Rewards are distributed by the protocol admin after each bridge-fee sweep cycle. | Program / Account | Address | Chain | | ----------------------- | -------------------------------------------- | ------ | | k9-staking (Anchor, v2) | CFC8uNdiCuHk1MnSUDBqDLy2dWqt6mgHZUWrxPmVwYej | Solana | | Staking state PDA | FXoFVCuekCQUG56wDZUkDyTZ7QgjuTwPVebGXT1Eo1vS | Solana | The ApeChain K9 staking vault is **deprecated**. Existing ApeChain stakers should unstake and bridge K9 to Ethereum or Solana. The Hammer UI shows a read-only retirement notice when the ApeChain peer is detected. ## Create a Market Any ERC-721 collection on a supported chain can have a Clutch.AMM market deployed for it. ERC-1155 support is available at the contract level; UI support is coming soon. Markets are permissionless — no approval needed. Multiple independent markets can exist for the same collection (each with its own parameters). The factory assigns each market a unique incrementing ID and deploys a fresh set of contracts for every market. ### Deployment Process * Provide the primary collection address, then optionally add more collections for a multi-collection market. * Define the collection token name, symbol, and how many tokens each NFT is worth. * Set fee parameters: random buy fee, specific buy fee, and borrow APY. Protocol fee is fixed at 0.5%. * Pay the deployment fee (if any) to the factory. The fee is set by the protocol admin and may be zero. * The factory deploys all required contracts (token, escrow, AMM vault, loan vault, staking vault — plus an optional governance contract), mints the total supply into escrow, and registers the market with a unique ID. ### Deployment Parameters & Bounds | Parameter | Min | Max | Notes | | -------------- | -------------- | --------- | ----------------------------------------------------- | | tokensPerNFT | 100 | 1,000,000 | Sets the AMM exchange rate; defines 1 NFT \= N tokens | | randomBuyFee | 1% | 15% | Applied to random buys and sells (staker portion) | | specificBuyFee | ≥ randomBuyFee | 15% | Must be ≥ randomBuyFee | | protocolFee | 0.5% | 0.5% | Fixed at 0.5% — goes to Clutch DAO treasury | | borrowAPY | 1% | 50% | Fixed for the lifetime of the market | | deployFee | 0 | — | Set by admin; currently free | **Immutable core market config.** tokensPerNFT, totalSupply, bucket caps, and borrowAPY cannot be changed after deployment. There is no upgrade path for these parameters. The protocol admin retains DEFAULT\_ADMIN\_ROLE and PAUSER\_ROLE for pause/unpause and emergency controls. Review every value carefully before confirming. [Launch Market Creator](https://anvil.clutch.market/create-market) ## Solvency & Safety The protocol enforces a **global solvency invariant** on every token release. The invariant guarantees that the total tokens in circulation can never exceed the tokens held in escrow minus the permanently locked portion. It is checked on every call to the TokenEscrowReserve and monitored off-chain by the risk engine. ### The Invariant // Must hold at all times (checked in TokenEscrowReserve.release() and returnTokens()): escrow.balanceOf(escrow) + totalReleased >\= totalSupply // In plain terms: tokens held in escrow + tokens already out ≥ total minted. // Protects against any out-of-thin-air token release. // If this check fails, the transaction reverts with InvariantViolation. ### Bucket Architecture Token releases are gated by three isolated buckets. Each bucket has a hard cap. Once a bucket reaches its cap, no further releases from that path are possible, protecting the other paths. | Bucket | Funded by | Cap | | -------------- | ---------- | ----------------------------------------------------- | | AMM Reserve | Swap buys | Set at deployment (ammBps % of totalSupply) | | Loan Reserve | Borrowers | Set at deployment (loanBps % of totalSupply) | | Reward Reserve | Fee income | Launch cap is fixed to 0; rewards are fee-funded only | Launch allocation is policy-constrained: **rewardBps must be 0** and **loanBps is capped at 5%** . Any unallocated portion remains in escrow unless released through protocol-defined paths. ### Fail-Safes * Emergency pause: any vault can be paused by the protocol admin (PAUSER\_ROLE). Unpausing requires DEFAULT\_ADMIN\_ROLE. * Bucket caps: each release path (AMM, Loan, Reward) has a hard cap set at deployment; once reached, no further releases from that path. * Invariant breach: if the global invariant fails after any release, the transaction reverts automatically with InvariantViolation. * Liquidation bot: open-source reference liquidator monitors all loans for expiry. * No admin drain: escrow only releases tokens via authorized vault contracts. The admin cannot withdraw tokens directly. ## Smart Contracts The table below shows the contracts currently configured in this frontend environment. For local Anvil sessions, these are local development addresses. The factory is the single entry point for deploying new markets. ### AMM Deployed Addresses | Contract | Address | Network | | --------------------- | ------------------------------------------ | ---------------- | | AMMFactory | 0x87B62309B6fF4FA184C89919351bEbd3AC11Fc84 | ApeChain (33139) | | BatchRouter | 0x1577A7E3740846885610B9Be89886008D977AfDc | ApeChain (33139) | | CamelotListingRequest | Not configured | ApeChain (33139) | | AMMFactory | 0xEA095646EC6A56EDbFEe84cCcf23eFCec12566A0 | Ethereum (1) | ### K9 Bridge & Staking Addresses | Contract / Program | Address | Network | | ---------------------- | -------------------------------------------- | ------------------- | | K9 ERC-20 (v2) | 0xbc920c7Fa25D3Cd5606394aa4C6751d71DCb7930 | Ethereum (1) | | ETHEscrowVaultV2 | 0xfC2c93C9ADB7B0B93FA67B3aAfEcD74538887b00 | Ethereum (1) | | LZBridgeAdapterV2 | 0x42BAb297f90e6285546F05abdF4C42D8415E9794 | Ethereum (1) | | K9StakingVaultV2 | 0x4C29D80e37f90d2BAf595F5d4cF1556506F9861b | Ethereum (1) | | K9FeeRouterV2 | 0x1D7702F4dCfAe6B41B45BFf428F75434FeC4d3A1 | Ethereum (1) | | K9ProposalRegistry | 0x039f5ed5Ed596F722a60595e704603c2E1Df35f6 | Ethereum (1) | | K9 SPL Mint (v2) | 5je5ondjVJcHjWz2v4mLZn7PsQGr47XQFjFTfrtCu1ox | Solana mainnet-beta | | k9-escrow (Anchor v2) | DuwVxzTcYrXrBJWKeHeJp4H9PAF8pQbEqpNhrUpyYub1 | Solana mainnet-beta | | k9-staking (Anchor v2) | CFC8uNdiCuHk1MnSUDBqDLy2dWqt6mgHZUWrxPmVwYej | Solana mainnet-beta | ### Key Function Reference // Factory struct CreateMarketParams { address collection; string name; string symbol; uint256 tokensPerNFT; uint256 totalSupply; FeeConfig fees; // { randomFeeBps, specificFeeBps } BucketConfig buckets; // { ammBps, loanBps, rewardBps } — must sum \<\= 100% uint16 borrowAPYBps; uint16 liquidationIncentiveBps; GovernanceParams governance; // { enabled, proposalFee, minProposerStake } } struct CreateMultiCollectionParams { string name; string symbol; uint256 totalSupply; BucketConfig buckets; uint16 liquidationIncentiveBps; GovernanceParams governance; CollectionConfig\[] collections; // per-collection: { collection, tokensPerNFT, fees, borrowAPYBps } } createMarket(CreateMarketParams p) payable → MarketInfo createMultiCollectionMarket(CreateMultiCollectionParams p) payable → MarketInfo allMarkets() view → MarketInfo\[] marketCount() view → uint256 getCollectionsForMarket(uint256 marketId) view → address\[] getCollectionVaultInfo(uint256 marketId, address collection) view → CollectionVaultInfo // NFTAMMVault sellNFT(uint256 tokenId, uint256 minPayout) buyRandomNFT(uint256 maxCost) buySpecificNFT(uint256 tokenId, uint256 maxCost) quoteRandomBuy() view → (totalCost, baseCost, fee, protocolFee, inventorySize, nextTokenId) quoteSpecificBuy(uint256 tokenId) view → (totalCost, baseCost, fee, protocolFee, available) // LoanVault borrow(uint256 tokenId, uint256 duration) repay(uint256 loanId) liquidate(uint256 loanId) getLoanDetails(uint256 loanId) view → LoanInfo // NFTStakingVault stake(uint256 tokenId) unstake(uint256 tokenId) claimRewards() pendingRewards(address user) view → uint256 All function signatures follow Solidity ABI encoding. Use viem or ethers.js to interact with contracts directly, or use the Clutch.AMM frontend for a guided experience. ### UI Metrics Note Market cap is displayed as a token-denominated value using the market's native token symbol (e.g. 21.89M TEST). For multi-collection markets, the label reads **Est. Market Cap** because capacity is derived from shared escrow sizing rather than per-collection hard allocation. TVL is shown as the number of NFTs currently held in protocol vaults. ## Token Logo Guide When you deploy a new market, the protocol creates a brand-new ERC-20 token for your collection. By default, wallets and block explorers will show a placeholder icon. Follow these steps to get your token logo displayed across the ecosystem. ### How Clutch.AMM resolves token logos The app tries the following sources in order, using the first one that loads successfully: | Priority | Source | How to set it | | --------------- | --------------------------- | --------------------------------------------------------------------------------------------- | | 1. Fastest | Custom URL (your DB record) | Paste a URL when creating your market. Stored in the Clutch.AMM backend and shown immediately | | 2 | Trust Wallet Assets GitHub | Open a PR to trustwallet/assets repo with your logo file | | 3 | Clutch token-assets repo | Submit via Discord. Logo added to clutchmarkets/token-assets | | 4. Always works | Initials fallback | Auto-generated from your token symbol. No action needed | ### Option 1: Self-host (instant) This is the fastest path. Host a square PNG or SVG anywhere (IPFS, Arweave, GitHub, CDN), then paste the URL into the Token Logo field when creating your market. The URL is stored in our backend and shown everywhere on Clutch.AMM immediately. Recommended format: 256×256px square PNG with transparent background. Avoid JPEGs. They don't handle transparency. \# Good logo URLs: [https://ipfs.io/ipfs/QmXxx.../logo.png](https://ipfs.io/ipfs/QmXxx.../logo.png) [https://arweave.net/TXID/logo.png](https://arweave.net/TXID/logo.png) [https://raw.githubusercontent.com/yourorg/assets/main/cpup.png](https://raw.githubusercontent.com/yourorg/assets/main/cpup.png) [https://cdn.yourproject.com/token-logo.png](https://cdn.yourproject.com/token-logo.png) ### Option 2: Block Explorer (recommended) Your chain's block explorer (ApeScan for ApeChain, Etherscan for Ethereum) allows token issuers to upload a logo that appears on the token page and in MetaMask's token import flow. * **1.**Deploy your market (this creates the ERC-20 token on-chain). * **2.**Go to your chain's block explorer and search for your token contract address. * **3.**Click 'Update Token Info' on the token page. * **4.**Fill in the token info form and upload your logo PNG (max 1MB, square). * **5.**Submit. Verification usually takes 24-48 hours. [ApeScan ↗](https://apescan.io/)[Etherscan ↗](https://etherscan.io/) ### Option 3: Trust Wallet Assets Trust Wallet maintains an open-source repository of token logos used by Trust Wallet, MetaMask, and many other wallets. Getting listed here gives the broadest ecosystem coverage. \# Repository structure: trustwallet/assets/ blockchains/ apechain/ assets/ 0xYourTokenAddress/ ← checksummed ERC-55 address logo.png ← 256×256px, max 100KB \# Steps: 1\. Fork [https://github.com/trustwallet/assets](https://github.com/trustwallet/assets) 2\. Create the directory at the path above 3\. Add your logo.png (256×256, transparent bg) 4\. Open a Pull Request — usually merged in 1–3 days Trust Wallet requires the directory name to be the **EIP-55 checksummed** address (mixed case). Use a checksum tool or call `ethers.getAddress(address)` to get the correct casing. ### After listing Once your logo is live anywhere (self-hosted URL, ApeScan, or Trust Wallet), update your market's token logo URL in the market metadata editor (owner-only on the market page) or set it during market creation. The change propagates site-wide immediately. ## Risk Disclosure Clutch.AMM is experimental software. Interact only with funds you can afford to lose. ### Smart Contract Risk Despite thorough testing and audit processes, all smart contracts carry the risk of undiscovered vulnerabilities. A bug could result in partial or total loss of funds. ### Liquidation Risk If you take out a loan and do not repay before the grace period ends, your NFT collateral will be permanently liquidated. There is no recovery mechanism. The liquidation is irreversible on-chain. ### Market Risk NFT floor prices can move rapidly. A sharp decline in floor price reduces the collateral value of your NFT. While Clutch.AMM uses fixed-rate loans (not mark-to-market LTV), the token payout you receive when selling is directly tied to current floor conditions. ### Liquidity Risk If the vault's NFT inventory is empty, random and specific buys will fail until new NFTs are deposited. If the escrow bucket reaches its cap, swaps in that direction may temporarily be unavailable. ### Oracle & Randomness Risk Random buy selection uses FIFO inventory ordering (oldest deposited, first purchased). This avoids external oracle dependencies, but users should still assume NFT purchase outcomes depend on current vault inventory state at execution time. ## Audit Clutch.AMM contracts have undergone a **comprehensive security audit** covering all 14 Solidity source files (2,779 SLOC) across the factory, market, vault, governance, router, and library modules. The audit has been certified by **Hashlock**. Hashlock Certified — PASSED Zero vulnerabilities identified across all severity levels. Full clean report. | Auditor | Scope | Status | Result | | -------------------- | ---------------------------------------------- | ---------------- | ------- | | Hashlock | Full contract suite (14 contracts, 2,779 SLOC) | Complete | PASSED | | Community / ImmuneFi | Bug bounty program | Active at launch | Ongoing |