Skip to main content

Primary threats

Launch gates

1

Specify

Freeze an explicit state machine, authorization matrix, storage/events, upgrade model, and emergency behavior.
2

Prototype

Implement contracts and clients against a dedicated test network configuration with deterministic fixtures.
3

Test

Add unit, property, fuzz, invariant, integration, replay, timeout, failure, and migration tests.
4

Audit

Commission independent contract and application security reviews; close findings and retest.
5

Pilot

Use capped assets, providers, corridors, and exposure with human monitoring and rehearsed rollback.
6

Operate

Monitor contract events, ledger lag, authorization failures, fee anomalies, unresolved states, and control-plane divergence.
Contract IDs, issuer addresses, RPC URLs, signing material, and network passphrases belong in validated environment-specific configuration or a secret/configuration manager. Mainnet and testnet state must never share identifiers or databases without an explicit partition.