Security Audit

Smart Contract Security Audit

Cartha's smart contracts have been audited by Hashlock, a leading blockchain security audit firm. The audit was completed in January 2026 and the smart contracts received a Secure rating.

Audit Details

• Audit Firm: Hashlock

• Project Type: DeFi

• Platform: Ethereum (Base Mainnet)

• Languages: Solidity

• Date: January 2026

• Security Rating: Secure

About the Audit

The audit covered Cartha's smart contract infrastructure, including:

• Vault contracts and deposit mechanisms

• Liquidity management systems

• On-chain lock and unlock functionality

• Security of USDC deposits and withdrawals

• Access controls and permission systems

Cartha operates as Subnet 35 on the Bittensor network, providing a decentralized liquidity engine for the 0xMarkets DEX. The protocol enables liquidity providers to deposit USDC into on-chain vaults, with dynamic allocation across trading pairs based on real-time demand.

View the Full Audit Report

Audit Report: View Report (PDF)

Audit Page: https://hashlock.com/audits/cartha

What Was Audited

The Hashlock audit included:

• Manual, line-by-line code review

• Competition-level security analysis

• Verification of smart contract logic

• Testing of edge cases and potential vulnerabilities

• Review of access controls and permission management

• Analysis of deposit, withdrawal, and lock mechanisms

Security Best Practices

While Cartha's smart contracts have been audited and rated as secure, users should always:

• Understand the risks of participating in DeFi protocols

• Start with small amounts when testing new features

• Verify contract addresses before interacting with the protocol

• Keep private keys secure and never share them with anyone

• Monitor positions regularly through the Cartha Interface

Smart Contract Addresses

All verified smart contract addresses can be found in the Cartha overview.

Continuous Security

Security is an ongoing priority for Cartha. The team:

• Monitors on-chain activity for anomalies

• Maintains communication channels for security disclosures

• Continues to follow best practices in smart contract development

• Works with validators to ensure proper liquidation monitoring

Report Security Issues

If you discover a potential security issue, please contact the team through the official channels listed on the Contact page.

---

Disclaimer: While smart contracts have been audited, all DeFi protocols carry inherent risks. Users should understand these risks before participating. See Legal & Risk for more information.