Veda’s embedded earn products are powered by heavily-audited smart contracts featuring enterprise-grade admin, compliance and risk controls.
Four security pillars: the vault contract, access controls, monitoring, and 3rd party audits.
The core vault contract, BoringVault, is deliberately minimal. Onchain permissions restrict strategy actions to approved contracts, functions, and parameters (enforced via Merkle proofs). Exchange-rate updates are bounded to limit abnormal accounting changes.
Role-based permissions, MFA, segregated production environments, and secure key management protect privileged access. Vault-configuration signing is cryptographically attested from development to execution.
Veda monitors onchain activity and supporting infrastructure 24/7, with automated health checks and documented incident response. Third-party blockchain threat detection complements internal monitoring.
In addition to robust internal security processes, Veda works with leading 3rd party security firms to conduct dozens of audits, as well as working with formal verification specialists to continuously review and battle-test the architecture. Ongoing audits, fuzzing and code reviews provide continuous scrutiny.
Who can do what, what happens when systems fail, and what an enterprise can verify.
Production and non-production environments are segregated; vulnerability management and peer-reviewed infrastructure changes reduce operational risk.
Available for diligence.
