🔍

Trust & Transparency

Don't trust - verify. Everything you need to validate Axiom.

We understand crypto has trust issues. Too many projects have rugged, scammed, and disappeared with people's money. Axiom is built differently. Every claim we make is verifiable on-chain. Every fund is tracked. Every decision goes through multi-sig. This page gives you everything you need to verify - because your trust should be earned, not assumed.

Treasury Balance

...

Multi-Sig Protected

Total Staked

...

In Staking Contracts

Security Features

22/25

Active Protections

Contracts Verified

23/23

On Arbiscan

Why You Can Trust Axiom

We've implemented multiple layers of security to protect your funds and ensure transparency. Here's what's active and what's coming.

🛡️

OpenZeppelin Contracts

Active

All 23 smart contracts built on battle-tested OpenZeppelin security standards (AccessControl, Pausable, ReentrancyGuard, SafeERC20)

🔐

Role-Based Access Control

Active

Granular permissions with ADMIN_ROLE, MINTER_ROLE, PAUSER_ROLE, COMPLIANCE_ROLE, ORACLE_ROLE, and more across all contracts

⏸️

Pausable Contracts

Active

All 23 contracts have emergency pause capability via onlyRole(ADMIN_ROLE) to halt operations if threats detected

🚫

Reentrancy Guards

Active

nonReentrant modifier on all state-changing functions (payments, withdrawals, staking, swaps)

✍️

Multi-Sig Treasury

Active

Gnosis Safe treasurySafe/adminSafe in 6+ contracts. All fund movements require multi-signature approval.

💸

SafeERC20 Transfers

Active

All token transfers use SafeERC20 library preventing failed transfer exploits and ensuring proper return value handling

🆘

Emergency Withdrawals

Active

emergencyWithdrawETH() and emergencyWithdrawAXM() functions allow admin recovery of stuck funds to treasury

🐋

Anti-Whale Protection

Active

AxiomV2 token has maxTxEnabled with configurable maxTxAmount limits to prevent market manipulation

📊

Price Manipulation Protection

Active

DePINNodeSales has price bounds (min/max AXM per ETH), minimum liquidity checks, and admin verification for DEX pricing

⏱️

Rate Limiting & Cooldowns

Active

IoTOracleNetwork (1 min cooldown), CitizenReputationOracle (1 day cooldown) prevent spam and manipulation attacks

🔮

Oracle Consensus

Active

IoTOracleNetwork requires MIN_ORACLE_CONSENSUS (3+) confirmations before data is considered valid

🚧

DOS Prevention Limits

Active

Hard caps on arrays: MAX_QUESTS_PER_USER (50), MAX_ENROLLMENTS (100), MAX_ACHIEVEMENTS (500) prevent gas griefing

🔒

Investment Lock-up Periods

Active

CapitalPoolsAndFunds enforces configurable lock-up periods before withdrawals to ensure fund stability

📈

Credit Score Bounds

Active

CitizenReputationOracle enforces MIN_CREDIT_SCORE (300) to MAX_CREDIT_SCORE (850) with MAX_CREDIT_LIMIT cap

📅

Data Validity Periods

Active

Oracle data auto-expires after configurable validity periods, preventing use of stale price/sensor data

🏠

Listing Expiration

Active

RealtorModule listings auto-expire after duration, preventing stale or abandoned property listings

Input Validation

Active

MAX_DESCRIPTION_LENGTH checks, address(0) validation, and require statements throughout all contracts

💰

Fee Caps

Active

AxiomExchangeHub enforces MAX_SWAP_FEE (1%) preventing excessive fee extraction

🔏

SIWE Authentication

Active

Sign-In with Ethereum (EIP-4361) for cryptographic wallet verification - no password storage

🏗️

Infrastructure Security

Active

24/7 monitoring, DDoS protection, API rate limiting, and encrypted data storage/transmission

🚨

Incident Response

Active

Dedicated incident response program with clear escalation procedures to protect user assets

🧮

Formal Verification

Active

SMTChecker enabled with mathematical proofs for mint, transfer, and fee calculations. Slither static analysis passed with no critical vulnerabilities.

🔐

Liquidity Lock

Post-TGE

LP tokens to be locked for 2 years post-TGE using trusted locker contract

📋

Third-Party Audit

Post-TGE

Professional security audit by reputable firm scheduled before mainnet launch

🐛

Bug Bounty Program

Post-TGE

Immunefi or similar program rewarding security researchers who find vulnerabilities

The "Can't Rug" Guarantee

Here's why it's technically impossible for us to rug pull:

  • Multi-Sig Treasury: Requires 3 of 5 team members to sign any withdrawal
  • 48-Hour Timelock: Major changes have a delay - you can exit first
  • Liquidity Lock: LP tokens locked for 2 years - cannot be pulled
  • Team Vesting: Team tokens locked for 4 years with 1-year cliff
  • On-Chain Everything: Every transaction is public and verifiable

Still Have Questions?

We're committed to full transparency. If there's anything else you'd like verified, reach out and we'll add it to this page.