Platform

Security

Vael is designed so that no operator, including Vael itself, can move your funds without your signature. Every dollar sits in an onchain vault you control.

The self-custody model

When you deposit, USDG goes into a Vault smart contract on Robinhood Chain. The vault only releases funds against a withdrawal request signed by your wallet. There is no admin key that can drain the vault, and no path for Vael to move your funds.

You hold the keys

Your wallet is the account. Sign transactions to trade or withdraw. No custodian, no intermediary.

Onchain vault

Deposits sit in the Vault contract on Robinhood Chain. The address is public and verifiable in any block explorer.

Audited contracts

Vault and settlement contracts are independently audited. Reports are published as they land.

What could go wrong

Self-custody removes custodial risk but does not remove all risk. Read this section carefully before sizing positions.

Smart contract risk. The Vault contract could have a bug. Audits reduce this risk but do not eliminate it.
Oracle risk. Mark prices are fed by price oracles. A bad print can trigger a false liquidation. Vael uses time-weighted marks and deviation caps to blunt this.
Liquidation risk. Leverage magnifies losses. Volatile markets can move faster than your stop can close.
Weekend / off-hours risk. Stock perps trade 24/7, but the underlying does not. Gap moves are possible.
Network risk. Vael inherits the liveness and finality guarantees of Robinhood Chain. Outages on the chain can delay deposits, withdrawals, and settlement.

You are your own bank

Nobody at Vael can reverse a trade, restore a lost wallet, or override a liquidation. Back up your seed phrase, understand what you are signing, and never share your private keys.

Vault contract address

The Vault contract lives on Robinhood Chain. The address is published in the app and verifiable in any block explorer for Robinhood Chain.

Bug bounty

Reports of vulnerabilities in the Vael vault, settlement, or web stack are rewarded through the bug bounty program. Reach out through the security contact listed in the app.