Security

Security you can verify.

DeFi keeps suffering from exploits. Royco is built differently with multiple tier-one audits, formal verification, continuous monitoring, and robust operational practices, because security is our paramount priority.

VIIIVIIVIVIVIIIIII
Bug Bounty
$250K
Audits
5
Settlement
24h
Monitoring
24/7
Security Partners
Cantina
Certora
Hexens
Hypernative
Immunefi
Nethermind
Architecture
01

Eight layers of defense.

Royco stacks eight independent defenses so a failure in any one is caught by the next.

Oracle policy

Royco does not depend on any oracle tied to secondary liquidity. Every price is either a fundamental oracle or a manually-maintained rate, updated based on an assessment of the underlying asset. This makes the protocol resistant to an entire class of price-manipulation attacks that have drained other DeFi systems.

Audits
02

Royco's complete audit history.

View every audit report, competition, and formal-verification engagement Royco has undergone.
Firm
Engagement
Scope
Date
Report
Certora
Formal Verification
Core Invariants, Ongoing Specification Coverage
Jul 2026
View
WatchPug
Pendle Integration
Royco Tranches Pendle SY
Apr 2026
View
Certora
Full Protocol Audit
Core Protocol Contracts and Entry Point
Apr 2026
View
Hexens
Pendle Integration
Royco Tranches Pendle SY
Apr 2026
View
Hexens
Entry Point and Integrations
Entry Point and New Markets
Apr 2026
View
Nethermind
Royco Makina Strategy
Bridge between Concrete Earn v2 and Makina
Mar 2026
View
Hexens
Full Protocol Audit
Core Protocol Contracts
Mar 2026
View
Cantina
Competitive Audit
Public Competition from Whitelist Perspective
Feb 2026
View
Hexens
Whitelist Review
Core Protocol from Whitelist Perspective
Jan 2026
View
Hexens
Full Protocol Audit
Core Protocol Contracts
Jan 2026
View
External Audits
ConcreteMakina
Governance
03

No hot wallet. No single signer. No instant upgrades.

Every privileged action (upgrades, parameter changes, signer rotations) moves through a predictable, on-chain procedure depositors can watch in real time.
01Proposed
02Signed(3-of-5 Multisig)
03Timelocked(24h–7d Timelock)
04Executed
Breakdown of every privileged action by delay
Contract Upgrades48 hours
Oracle Swap24 hours
Risk Parameters48 hours
Fee Changes48 hours
Pausing/UnpausingInstant
Pause is the only instant action. It can only stop activity, never move value. Every other action sits in public for at least 24 hours before it can execute.
Emergency Response
04

Hope is not a plan. We drilled for this long before.

We plan for failure. A security incident on Royco triggers a pre-rehearsed, on-call response — not a Slack thread at 3am.
RosterRoyco War Room

Hand-picked security engineers and council members — named, on-call, and rehearsed. When the alarm trips, the room is already live. No hunting for who’s on-call. No improvising the chain of command.

T + 0
Detection24/7
On-call rotation

Hypernative or the security council detects an anomaly. On-call rotation is paged immediately.

T + 2 Min
Triage

Incident commander convenes the on-call engineers, and security council on a dedicated channel.

T + 15 Min
Containment<15m
Target MTTR

If the anomaly is confirmed, the security council executes an instant pause. Queue settlement halts.

T + 1 hour
Communication

A public post-to-known-channels status update is issued. Depositors are informed before markets are.

T + 24 hours
Post-mortem<7d
Public write-up

A written post-mortem is prepared and published within 7 days of containment.

Open Source
05

The source is the truth. Fork it. Read it. Break it.

Every contract, test, and deployment script is public — the same files the auditors reviewed are the ones running in production.
roycoprotocol / royco-dawn
Core contracts, tests, and deployment scripts for Royco Dawn.
Backed By
06

Investors who read reports. Not just pitch decks.

We chose our investors as carefully as they chose us — funds with a long record of backing protocols that take security seriously.
Electric CapitalNFXCoinbase Ventures
+ angels & operators
Curated Vaults
07

Vaults with nothing hidden. Managed in public, not in private.

Alongside the core protocol, Royco offers curated vaults, a separate product with its own security surface. Here's exactly how it's built, and exactly who's accountable for what.
01Vault Tokens
srRoyUSDCSenior Royco USDC
02Managed byDialectic on Makina
ManagerDialectic
ContractsMakina, Concrete
Multisig3-of-5 (separate Safe)
Timelock48h on allocation changes
Upgrade GateConcrete 3-of-5 whitelist
03Allocated Across
Royco senior tranches
+ venues selected by Dialectic
04AccountabilityWho owns what
Royco ProtocolGovernanceThe eight layers above.
DialecticAllocation PolicyWithdrawal queue, vault allocations and rebalancing.
MakinaVault Contracts (Internal)Internal vault infrastructure, deployments and scripts for managing positions.
ConcreteVault Contracts (User Facing)User facing vault infrastructure and upgrades.
CounterpartiesDownstream VenuesRoyco senior tranches and venues selected by Dialectic. Each has its own security surface.
Every allocation is on-chain and public, so you can always see exactly where your deposit sits.Deposit into Royco Senior USDC Vault ->
Get started

Deposit with confidence.

You've read the dossier. The contracts, the audits, the timelocks, the queue. From here, it's your call.

Explore DawnRead the docs

This page documents the full security posture of Royco Dawn, and may include features that are currently in pipeline for an exhaustive release. The timelocks, queue delays, multisig, and monitoring described above are reviewed frequently and may change to tighten security. Specific parameters and implementation details remain subject to change as protocol evolves.