Skip to content

Security architecture

ClearPortX’s security model is built around four principles: defense in depth, minimized trust assumptions, human-in-the-loop circuit breakers, and economic alignment. This page is the architectural overview. Specific subsystems are documented in Price feeds, Guardian, and Audits.

Every critical operation passes through multiple independent validation layers. A single compromised component cannot trigger loss of funds — every attack vector must clear several sanity checks.

Where possible, we rely on verifiable cryptographic signatures and independently operated oracle networks rather than trusted operators. Where a trusted operator is unavoidable — as with the Guardian multisig — we document the role, the keys, and the procedure explicitly.

Every product has a pause state that can be triggered by the Guardian in response to anomalous on-chain behavior. Pausing preserves user funds and halts new state transitions until the anomaly is investigated.

Risk parameters for the money market are tuned so that liquidators are profitable at the moment positions become liquidatable, ensuring bad debt is cleared before it accumulates. The reserve factor feeds an insurance fund that socializes tail risk across depositors.

Full architectural diagrams and a threat model will be published with the first audit report.