Transparently smart contracts govern real governance decisions and treasury funds. Security is foundational to our mission of radical transparency.
| Version | Supported |
|---|---|
main branch |
✅ Active |
| Tagged releases | ✅ Active |
Please do not report security vulnerabilities through public GitHub issues.
Email: security@elevation.foundation
Subject: [SECURITY] Transparently — Brief description
Include:
- Description of the vulnerability
- Steps to reproduce or proof-of-concept
- Potential impact assessment
- Any suggested mitigations
- Acknowledgment: Within 48 hours
- Initial assessment: Within 5 business days
- Resolution target: Within 30 days for critical issues
All Transparently contracts follow:
- OpenZeppelin libraries for standard patterns
- Checks-Effects-Interactions pattern for all external calls
- ReentrancyGuard on all value-transferring functions
- Integer overflow protection via Solidity 0.8.x
- Event emission for all state changes
- Role-based access control (not single-owner patterns)
- Timelock on all treasury operations
Transparently has not yet undergone a formal third-party audit. Contracts are deployed on testnet only. Do not use mainnet funds with unaudited contracts.
A formal security audit is planned prior to mainnet deployment.
The Elevation Foundation is a 501(c)(3) nonprofit. EIN: 93-2511290.
Contact: security@elevation.foundation