# Security

Safura provides robust protocol security by combining regular audits, live contract monitoring, and protective community mechanisms. Below is a detailed breakdown of the audits and security practices that help ensure the safety of Safura smart contract infrastructure.

We have completed a diff audit by auditors from [AuditOne](https://www.auditone.io/audit-report/safura-audit). 

#### Audits Endorsed by Safura

To uphold the integrity and safety of Safura’s smart contracts, Safura utilized Nexus Mutual’s top-tier audited smart contracts.

* [**iosiro Audit – October 2023**](https://iosiro.com/audits/nexus-mutual-tokenomics-smart-contract-audit)\
  Reviewed the Ratcheting AMM (RAMM) contracts to verify the security and functionality of the new framework.
* [**Chaos Labs Economic Audit – October 2023**](https://chaoslabs.xyz/resources/chaos_labs_nexus_mutual_pt_1.pdf)\
  Completed a deep economic assessment of the RAMM design to ensure sustainable tokenomics and proper incentive structures.
* [**iosiro Audits – Nov-Dec 2022 & Feb-Mar 2023**](https://gist.github.com/iosiro-security/9ab387c0f43fddfc50e3a66802d2f4f7#file-iosiro_nexus-mutual-v2-md)\
  Evaluated all contracts in the contracts/modules folder, the foundation of Nexus Mutual V2.
* **iosiro Audits – May & June 2021**\
  Covered key components including:
  * [Stacked risk contracts](https://iosiro.com/audits/nexus-mutual-stacked-risk-on-chain-mcr-and-swap-operator-smart-contract-audit)
  * [On-chain MCR contracts](https://iosiro.com/audits/nexus-mutual-stacked-risk-on-chain-mcr-and-swap-operator-smart-contract-audit)
  * [Swap operator](https://iosiro.com/audits/nexus-mutual-stacked-risk-on-chain-mcr-and-swap-operator-smart-contract-audit)
  * [Distributor smart contract](https://iosiro.com/audits/nexus-mutual-distributor-smart-contract-audit)
  * [Emergency response contract](https://iosiro.com/audits/nexus-mutual-emergency-response-smart-contract-audit)
* **G0 Group Audits – June & Nov 2020, March 2021**\
  Assessed:
  * [Pooled staking contracts](https://github.com/g0-group/Audits/blob/master/G0Group-NexusMutual2020Jun.pdf)
  * Claim payout upgrade mechanisms
  * Distribution contracts
* [**Solidified Audit – April 2019**](https://github.com/solidified-platform/audits/blob/master/Audit%20Report%20-%20Nexus%20Mutual%20%5B22.04.2019%5D.pdf)\
  Conducted a pre-mainnet audit of the core smart contracts and system components critical to launching the protocol.

#### Ongoing Security Practices: RAMM Launch

To reinforce trust during the RAMM deployment, Nexus Mutual implements advanced on-chain safeguards and real-time surveillance:

* **Circuit Breakers**\
  Enforces ETH withdrawal and NXM minting caps to mitigate systemic risk. These limits are eased gradually over time.
* **Real-Time Monitoring**\
  Leveraging Tenderly alerts, the engineering team stays updated on any abnormal or suspicious contract behavior.
* **Emergency Pause Capability**\
  The Advisory Board can immediately halt RAMM contract activity in critical situations.

#### Bug Bounties 

As part of Safura’s security efforts, we have launched a bug bounty program running until December 31, 2026. Participants must complete KYC to be eligible, and rewards range from $300 to $10,000, depending on the severity of the reported issue. More details can be found on[ AuditOne's Bug Bounty page](https://www.auditone.io/bug-bounty/safura).

<br>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.safura.io/security.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.