Origin’s security program applies to all its smart contracts, operational systems, and responsible disclosure.
No program completely eliminates risk, but we reduce it through pre-launch review, strict controls on operations, rapid response to reports, and transparent communication with our stakeholders.
Security by design
Origin’s smart contracts have been in production since 2020. The team maintains rigorous security practices to meet the standards capital allocators demand.
Changes are reviewed by at least two engineers for various attack vectors before deployment.
Specialist firms review new contracts and material protocol changes.
Multisigs, timelocks, and strict permissions constrain sensitive operations.
Independent researchers can report eligible vulnerabilities through Origin’s Immunefi program.
Audit reports are published in Origin’s public security repository.
Selected firms that have reviewed Origin code and protocol changes
From code to production
Contract changes move through a fixed sequence of technical checks, independent review, and verified remediation before production.
Defense Across the Stack
Risk is managed across the contracts that hold authority and the systems that support them.
Onchain security
01Operational security
02Public bug bounty
Origin’s public Immunefi program gives researchers a private channel for eligible reports. Origin’s public Immunefi program publishes the eligible smart-contract and web/application scope, impact criteria, and reward terms.
Up to
$1M
in bug bounty rewards
Transparent security work
Published in Origin’s public security repository
Explore auditsPublished and maintained on Immunefi
View bounty scopeAvailable in Origin documentation
Read risk disclosuresAvailable through Origin’s public governance channels and onchain records
View governanceReview the published security materials, evaluate the risks relevant to your use case, or submit an eligible vulnerability report through Immunefi.