Do not create public issues for security vulnerabilities.
Email: security@mantissafi.com
- Initial response: 48 hours
- Status update: 5 business days
- Resolution target: 90 days
- Risk: Stale prices, flash loan attacks
- Mitigation: Staleness checks, TWAP, multiple oracles
- Risk: Price manipulation during exercise
- Mitigation: Snapshot-based pricing, reentrancy guards
- Risk: Systematic mispricing from rounding
- Mitigation: Fixed-point math, conservative rounding
- Risk: Unauthorized admin actions
- Mitigation: Role-based access, timelocks
- Internal review
- External audit
- Formal verification