Security Model

고지 사항: 이 백서는 영어 버전이 공식 문서입니다. 다른 언어 버전은 참고용입니다。

---

Defense in Depth

┌─────────────────────────────────────────────────────────────────┐
│                   SECURITY LAYERS                               │
├─────────────────────────────────────────────────────────────────┤
│                                                                 │
│  Layer 1: Smart Contract Security                               │
│  ├── Audited code (2+ firms)                                   │
│  ├── Formal verification (critical functions)                  │
│  ├── Test coverage >95%                                        │
│  └── Invariant testing                                         │
│                                                                 │
│  Layer 2: Access Control                                        │
│  ├── Role-based permissions                                    │
│  ├── Multi-sig wallets (3/5, 4/7)                             │
│  ├── Timelock on sensitive operations                          │
│  └── Key ceremony procedures                                   │
│                                                                 │
│  Layer 3: Operational Security                                  │
│  ├── Hardware wallets required                                 │
│  ├── Geographic distribution                                   │
│  ├── Background checks                                         │
│  └── Incident response plan                                    │
│                                                                 │
│  Layer 4: Monitoring & Response                                 │
│  ├── Real-time anomaly detection                               │
│  ├── Bug bounty program                                        │
│  ├── Emergency pause capability                                │
│  └── Insurance coverage                                        │
│                                                                 │
└─────────────────────────────────────────────────────────────────┘

---

Audit Program

Completed Audits

Auditor	Scope	Findings	Status
[TBD]	Core contracts	[TBD]	Planned
[TBD]	Oracle	[TBD]	Planned

Bug Bounty

Severity	Reward
Critical	Up to $100,000
High	Up to $25,000
Medium	Up to $5,000
Low	Up to $1,000

---

Access Control

Role Hierarchy

ADMIN_ROLE (4/7 multi-sig)
├── Can upgrade contracts
├── Can add new underlyings
└── Can modify parameters

PAUSE_ROLE (2/5 multi-sig)
├── Can pause contracts
└── Can resume (with timelock)

ORACLE_ROLE (2/3 committee)
├── Can update prices
└── Can resolve disputes

OPERATOR_ROLE (team)
├── Can execute settlements
└── Can manage LP operations

---

Emergency Procedures

Pause Protocol

Emergency Pause Flow:
├── 1. Threat detected
├── 2. Any PAUSE_ROLE holder triggers pause
├── 3. All trading halted immediately
├── 4. Team notified (PagerDuty)
├── 5. War room assembled
├── 6. Investigation begins
└── 7. Resume requires 2/3 PAUSE_ROLE + 24h cooldown

Incident Response

Phase	Timeline	Actions
Detection	0-15 min	Alert, assess, pause if needed
Containment	15-60 min	Isolate threat, secure assets
Investigation	1-24 hours	Root cause analysis
Recovery	1-7 days	Fix, audit, resume
Post-mortem	7 days	Report, improvements

---

Insurance

Coverage	Amount	Provider
Smart contract exploit	$5M	Nexus Mutual
Custodian failure	$10M	Traditional
D&O	$5M	Traditional

---

Next Steps

• Infrastructure
• Smart Contract Overview