From version 1.0-draft.22, the documents and this site state the security status of the protocol in one sentence, “Security review in progress: internal review rounds are under way and an external audit is being arranged.” Tags and badges use the short form, “Security review in progress”.
What it means
Security review in progress: internal review rounds are under way and an external audit is being arranged. A bug bounty programme follows the external audit.
The deployment plan that goes with it
- GIWA stays on testnet.
- Mainnet deployment follows the review rounds and one complete verification run; the external audit may not be complete by then, and its results are published when it is. The risk disclosure in each document says so.
- Fixed-Price Launch goes directly to mainnet, without a public testnet stage: Robinhood Chain and, from 1.0-draft.25, also Base.
The current state of each deployment is on the deployments page, and the review itself on the security page.