⊢SECURITY
SECURITY &
TRANSPARENCY
Math you can verify. Not our word.
AUDITS
NablaZ has engaged leading security firms for independent smart contract audits. Reports will be published in full upon completion.
CONTRACTS
All NablaZ protocol contracts are deployed on Arbitrum One mainnet. Every address is verifiable onchain.
NablaZ has deployed two ZK proof gates. The current gate (V4) is used by all accounts created after the May 2026 cutover. The legacy gate (V3) remains active for existing accounts — both are live and verifiable.
COVERAGE
2594
tests across 205 suites · 0 failures
Every capital operation requires cryptographic proof of eligibility. Proof requirements are enforced at the contract layer — not the application layer. Eligibility cannot be bypassed by the UI, the AI, or any operator.
SECURITY BY DESIGN
Deterministic Enforcement
Transfer restrictions, eligibility rules, and lifecycle states are encoded in contracts. No operator, broker, or legal opinion can override them. Normal operation excludes human discretion by design.
AI With Onchain Validation
The AI surfaces proposals. Onchain guards validate them. The AI cannot execute, cannot create exposure, and cannot bypass eligibility. Every AI action operates within declared bounds enforced by the protocol.
Non-Custodial By Architecture
User funds are held in individually deployed account contracts. NablaZ Labs does not hold custody of any user assets at any point.
BUG BOUNTY
Responsible Disclosure
Report vulnerabilities to security@nablaz.io
Critical findings are reviewed within 48 hours.
ZK CEREMONY
These hashes prove the trusted setup ceremony produced the verifier keys — independently verifiable.
Verify everything yourself.
Every contract is public. Every proof is verifiable. Every audit will be published.
View on Arbiscan