Security & Audit Information
Evidence available in this interface, plus clear limits on what has not been publicly published.
An audit does not guarantee absence of defects. No independently signed audit artifact is publicly downloadable from this frontend at present; therefore the public homepage does not display an “Audited” badge.
Reported build profile
- Compiler
- Solidity 0.8.36
- viaIR
- true
- Optimizer runs
- 1
- Target chain
- BNB Smart Chain · 56
- Platform runtime reported
- 24,505 bytes
Confirm deployed bytecode and compiler settings independently on BscScan.
Review status
Source verifiedPublic audit artifact unavailable
Project-provided re-audit materials report deterministic test passes and prior finding remediation. This page does not substitute for an independent report, deployed-bytecode comparison or current economic review.
Deployed contracts
Riva
0x7d9beE…03cdf4RivaTradingPlatform
0xce267A…decE3eRivaTradingVault
0xbF27e1…15b53CRivaRewardManager
0x5BD975…d6d27ARivaSalaryManager
0x1f5B6b…4A4a4ERivaPriceOracle
0x88B8c3…8ef7a8Known accepted design risks
- Vault owner can transfer any Vault token, including USDT backing open principal.
- Administrative roles have immediate parameter powers without a mandatory timelock or multisig.
- Riva pricing uses a single PancakeSwap V2 cumulative-price TWAP.
- LP lock/burn is not assumed without current on-chain evidence.
- Platform runtime size has limited upgrade headroom, though deployed contracts themselves are immutable unless their source explicitly provides admin configuration.