VLT security

Security

Bankroll Vault keeps the security story simple: fixed supply, locked liquidity, no admin functions, and no complex DeFi custody surface.

Shieldify: vltUSDC vault Shieldify: VLT token Go+ scan: VLT token

Open source

The whole ecosystem is public.

Nothing about Bankroll is closed: the vault and ZapHelper source Etherscan verifies against, this website and the dApp you transact through, the audit documents linked below, and the analytics adapters — all of it lives in the open on GitHub, for transparency and education.

GitHub: bankrollnetwork Contracts repo Frontend repo

Security posture

Simple contracts are easier to verify.

VLT is not a lending market, vault strategy, staking farm, bridge, or pooled custody product. It is a fixed-supply ERC-20 asset trading through a public Uniswap V2 liquidity market.

Locked Liquidity

The VLT market is built around secured onchain liquidity. The liquidity base is visible through Ethereum and can be inspected directly by anyone.

No admin functions

The token contract has no privileged admin controls, no hidden owner switches, and no team-operated function that can quietly rewrite the asset rules.

No DeFi attack surface

VLT does not custody deposits, rebalance strategies, issue loans, handle liquidations, or expose a yield-farm control plane. The core asset surface stays intentionally narrow.

Verifiable onchain

Supply, transfers, liquidity, contract code, and market activity are public Ethereum data. Security review starts from evidence, not promises.

Security references

Read the reviews directly.

Two subjects are reviewed separately: the VLT token (the fixed-supply ERC-20) and the vltUSDC vault (the Uniswap V4 liquidity vault built on top of it). Each button below names its subject and its reviewer.

Third-party audit — vltUSDC vault (Shieldify)

Shieldify's independent review of the vault and its ZapHelper periphery, in their public audit portfolio. Final report: 11 Informational — 0 Critical / High / Medium / Low.

Shieldify review: vltUSDC vault

Third-party audit — VLT token (Shieldify)

Shieldify's independent security review of the VLT ERC-20 itself — fixed supply, no mint, no admin surface.

Shieldify review: VLT token

Internal audits — vltUSDC vault

The pre-deployment internal passes over VltUsdcVault.sol and ZapHelper.sol: a full audit and an independent second-opinion review, both including static analysis and the dynamic test suite.

Internal audit: vltUSDC vault Codex review: vltUSDC vault

Internal audit — VLT token (Claude Opus)

The internal contract-level pass over the VLT token and its security assumptions.

Internal audit: VLT token

Third-party scan — VLT token (Go+ Labs)

Automated risk signals for the VLT contract on Ethereum from the Go+ Labs token security scanner.

Go+ scan: VLT token