Contracts & Security
Security reference for the contract surfaces, external dependencies, and review boundaries behind LP-backed lending.
Overview
Avana lends against LP collateral, so security review has to cover more than whether a contract compiles or transfers balances correctly. It also has to cover how pricing, custody, liquidation, and privileged controls behave when the market is under stress.
Contract review, economic review, and operational review all matter for LP markets. They reinforce each other and should be treated as one security program, not as three unrelated checklists.
Security Challenges
- • LP value can be path dependent and often needs DEX-specific custody and unwind logic.
- • Oracle misuse or stale pricing can create economic loss even when contracts execute exactly as coded.
- • Governance, parameter control, and emergency response are all part of the attack surface.
Multi-Layer Security
Contract review
Core contract surfaces, adapters, and privileged control paths should be reviewed before new LP families or new execution paths are enabled.
Economic stress testing
Test market shocks, oracle edge cases, and liquidation routing failures, not just unit-level contract behavior.
External review channels
Formal audits and the Bug Bounty program should both stay active. One does not replace the other.
Core Contract Surfaces
Borrow Spoke logic
Handles collateral admission, user accounting, and the spoke-side lifecycle for LP-backed loans.
Hub integration
Connects spoke-level borrowing capacity to shared credit and liquidity constraints in the Hub layer.
Oracle and valuation adapters
Translate LP positions into conservative collateral values using external prices, position reconstruction, and recoverable-value assumptions.
Liquidation execution layer
Coordinates unwind paths, fee realization, routing, and settlement when an unhealthy account must be closed or resized.
Trust Boundaries
- • Onchain accounting and liquidation settlement should be deterministic once triggered.
- • Oracle sources, DEX adapters, and operational liquidator infrastructure are external dependencies and should be monitored as such.
- • Governance, pause authority, and upgrades are privileged powers that should remain bounded, reviewable, and timelocked wherever possible.
Audit Readiness
This page does not publish speculative auditor schedules or placeholder milestones. Audit reports, scopes, and remediation notes should be published when they actually exist and can be reviewed in full.
High value audit targets usually include new LP family support, new liquidation paths, new oracle models, and any change that expands privileged control or recoverable value assumptions.