Skip to content

Security: SeamMoney/stable-hop

Security

SECURITY.md

Security

STABLE·HOP combines Celo/Mento money flows with an unaudited Arc Testnet contract. Do not use Arc Guard with production funds.

Product boundaries

  • Exchange and conversion-backed payment flows depend on Celo, Mento, wallet RPCs, and their current liquidity.
  • Cross-network features may depend on third-party routing infrastructure and should be verified before signing.
  • The client never requests or stores a seed phrase or private key.

Arc Guard boundaries

  • The contract has no owner, admin withdrawal, proxy, or backend signer.
  • A payment can settle only with a Pyth EUR/USD price no older than 30 minutes.
  • Oracle confidence must be within 1% of the reported price.
  • Only the payer can recover an expired payment.
  • Arc native USDC uses 18 decimals for msg.value; contract events and UI amounts use 6 decimals.

Reporting

Open a private security advisory in the GitHub repository. Do not include private keys, seed phrases, or funded credentials in an issue.

There aren't any published security advisories