> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ultramarkets.xyz/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

> Our approach to security and protecting user funds.

Security is foundational. We're building systems to protect user funds at every layer.

## Audits

Our smart contracts have been reviewed by independent security auditors. We are committed to transparency and publish all audit reports along with any remediation steps taken.

### Completed Audits

<CardGroup cols={1}>
  <Card title="CDSecurity Audit" icon="file-shield" href="https://github.com/metastable-labs/audits/blob/main/CDSecurity_Ultramarkets.pdf">
    Comprehensive security review of Ultramarkets smart contracts by CDSecurity.
  </Card>
</CardGroup>

<Info>
  **More audits are pending and on the way.** We will update this page as additional audit reports become available.
</Info>

## Bug Bounty

<Info>
  **Status:** Bug bounty program launching with public beta.
</Info>

We will offer rewards for responsible disclosure of security vulnerabilities. Details on scope, severity levels, and rewards will be published on our security page.

## Security Principles

<CardGroup cols={2}>
  <Card title="Defense in Depth" icon="shield-halved">
    Multiple layers of protection ensure no single point of failure
  </Card>

  <Card title="Transparent Operations" icon="eye">
    All smart contracts will be verified and open source
  </Card>

  <Card title="Continuous Monitoring" icon="radar">
    Real-time monitoring of positions and vault health
  </Card>

  <Card title="Responsible Disclosure" icon="handshake">
    Clear channels for reporting vulnerabilities
  </Card>
</CardGroup>

## Reporting Vulnerabilities

If you discover a security vulnerability, please report it responsibly:

1. **Do not** disclose publicly before we've had a chance to address it
2. Email security concerns to [support@ultramarkets.xyz](mailto:support@ultramarkets.xyz)
3. Provide detailed information about the vulnerability
4. Allow reasonable time for us to investigate and fix

<Note>
  Security researchers who report valid vulnerabilities will be credited (with permission) and may be eligible for bug bounty rewards.
</Note>