Security

No external audit yet. Mainnet waits for one. Until then the markets run on Elysium testnet.

What has been done

Twelve review rounds by a reviewer separate from the code’s author, each attacking the economics as well as the code, with working exploit tests for every finding. Every high and medium finding was fixed, except one accepted and disclosed below.
105 unit and fuzz tests, including a regression test for each exploit found.
Invariant testing: 13 properties of the protocol (the vault’s books balance, no position pays more than its equity, no healthy position can be liquidated by a quick pool push, the limits always hold, and more), each checked over 512,000 random actions by traders, liquidity providers, the keeper, the admin roles and attackers.
Fork tests against real pools on Elysium mainnet.
Static analysis (Slither): no high findings; every medium and low finding reviewed with a written verdict.

Winning traders are paid from the vault as they close, first come, first served; payouts are not reserved against withdrawals. See The vault.
The keeper and the lister are trusted roles with bounded powers. See Contracts and roles and Risks.

A private disclosure channel opens with the testnet launch and will be listed here.