🔒 Security & Trust
Built for institutional-grade security
$354K–$550K Year 1 security budget. Dual audits before mainnet. 24-hour timelock on all treasury movements.
Zcash shielded pool privacy at the infrastructure layer.
Trail of Bits
Agent logic, decision engine, risk parameter validation, autonomous execution paths,
oracle dependencies, and off-chain/on-chain coordination vulnerabilities.
Agent Logic
Decision Engine
OpenZeppelin
Smart contracts, treasury mechanics, bridge architecture, token economics,
access control patterns, and upgrade proxy safety.
Smart Contracts
Bridge
Timeline
Q4 2026, pre-mainnet
Security Budget
$354K – $550K Year 1
YieldSwarm's bug bounty program will launch on Immunefi prior to mainnet deployment.
In-scope: smart contracts, bridge mechanics, agent wallets, and treasury control logic.
Critical
$25,000
Direct fund loss
High
$10,000
Protocol manipulation
Medium
$2,500
Non-critical impact
Every significant protocol action enters a mandatory 24-hour waiting period before execution.
This prevents flash loan exploits, gives the community time to review large transactions,
and ensures no funds can be moved in a single block or session.
Timelock Applies To
All bridge transactions
Treasury withdrawals >$10K
Agent wallet permission changes
Protocol parameter updates
YieldSwarm's treasury and settlement layer runs on Zcash — the only major proof-of-work coin
with production-grade privacy. Shielded (z-address) transactions use zk-SNARKs to
conceal sender, receiver, and amount on-chain, while still proving transaction validity.
100%
YieldSwarm settlements shielded
Failover
David's Zcash Node (backup)
How ZecShield Bridge Works
-
1
DeFi yield collected in SOL/ETH positions on target chain
-
2
Bridge converts to ZEC, routes through shielded pool for settlement
-
3
Distributions to holders arrive shielded — zero on-chain amount visibility
-
▸
Entity: Wyoming DUNA formation Pending
-
▸
Offering: Regulation D 506(c) — accredited investors only
-
▸
KYC/AML: Required at deposit point for all investors
-
▸
Accreditation: Self-certification via accredited investor gate (available at
/membership)
-
▸
Risk Disclosures: Full disclosures provided at time of formal allocation — see
investor data room
-
▸
DUNA Members: BCCD token holders have documented rights as DUNA members with profit-share entitlements
Found something? We take all reports seriously. Critical and high severity issues will receive a response within 24 hours.