Smart contract audits

Every smart contract that custodies value or handles authorization on GM Markets is audited by independent security firms before deployment.

#What is audited

• Token contracts — the per-asset tokenized stock contracts
• Mint/redeem partner contracts — the authorized-participant gateway used by the broker partner to mint and burn tokens against custody
• Security-agent contracts — the on-chain mechanism that grants standing authority to redeem outstanding tokens against the underlying shares if GM Markets discontinues operations
• Proof-of-reserves attestation contract — the on-chain feed that the third-party attester writes to

#Audit history

The audit reports, audit firms, scopes, and remediation notes are published on the /security page and in the source repository for each contract. Every material change to a contract triggers a re-audit before deployment.

#Bug bounty

GM Markets runs a bug bounty for smart-contract issues. Severity tiers and payout brackets are listed on the /security page. Reports to security@gm.markets.