Security has been a first-class citizen for both Bluefin and Suilend. Suilend was among the first lending protocols to build withdrawal rate limits directly into the protocol at inception, a standard we independently developed across Bluefin's own infrastructure. Their contracts have been audited by
@osec_io, one of our long-standing audit partners, and formally verified by
@Certora. That foundation is strong and complements our own posture.
We've spent years thinking through and refining our risk models, including liquidation engines, isolated markets, oracle integrity, and black swan event behavior, all of which we'll be leveraging to refine how risk is handled here. It will also draw on our real-time security partners, OtterSec and
@AsymptoticTech, which we'll use for all enhancements and to include their verification attestations for contract upgrades.
The same engineering standards we hold at Bluefin will apply across both platforms: defense in depth from the contract layer through operations, institutional multisig custody, timelocked upgrades gated by audit-partner co-signers and a guardian pause, withdrawal limits sized to the real worst-case outflow, among the broader set of controls that make up our security standard.