Security
Audits, formal verification, and compliance reports
Sandclock takes security seriously. Every contract deployed to mainnet has been independently audited. Lindy Labs also runs formal verification to catch issues that traditional audits miss — see Aegis.
SOC 2 Report
Lindy Labs is SOC 2 Type 1 compliant, covering the systems and controls that underpin Sandclock. Independent attestation reports are available below.
PDF · 579KB
PDF · 596KB
Smart Contract Audits
All deployed contracts have been reviewed by independent security firms. Reports are organized by component.
ERC4626 Vault
The core vault contracts were audited twice ahead of the v2 launch.
Token
The QUARTZ token contract was audited at launch and again following updates.
Last updated