Security Audits
Independent verification for the Monstro ecosystem.
Security is a core pillar of Monstro. High-impact contracts are designed with simplicity, public verification, and minimal trusted assumptions wherever possible.
This page lists third-party audit reports for contracts across the Monstro ecosystem, including $MONSTRO, staking, mUSDC, and future product integrations.
Contracts that involve token custody, emissions, treasury flows, or vault accounting are prioritized for independent review before public release whenever possible.
Audit Reports
| Contract | Auditor | Status | Notes |
|---|---|---|---|
| $MONSTRO Token (ERC-20) | Hashlock | Completed | Fixed-supply token with no minting, no taxes, and renounced ownership. |
| $MONSTRO Staking Contract | Hashlock | Completed | Single-stake system, penalty decay, emissions logic, auto-stake activation. |
| mUSDC Vault | Hashlock | Completed | Non-upgradeable ERC-4626 USDC vault with immutable mint/redeem fees. mUSDC shares are backed by USDC held in the vault. |
Audit reports will be published here immediately upon completion.
Our Security Approach
- Simple, immutable smart contracts
No proxies, upgradeability, or privileged minting functions. - DAO-controlled parameters only
Staking has adjustable settings (penalty splits, tiers, emissions rate). The DAO can withdraw MONSTRO from the rewards pool, as it did to burn part of it under MIP-1, but cannot withdraw anyone's staked tokens. - Transparent public wallets and multisigs
All treasury flows are publicly trackable. - Conservative contract design
Minimal surface area, no unnecessary complexity, no opaque logic. - Independent audits + continuous internal review
All future high-impact contracts will be externally audited.
Labs also performs thorough internal analysis during development.