Risks & Security
Security reports
Polylog Labs
The account checkpoint protocol requires independent review and acceptance of the exact circuits, keys, contracts and client before real-value deployment. See Audits for release requirements.
SEAL relies on smart contracts, cryptography, a trusted app build and recoverable private account data. Losses or blocked access are possible. Mainnet deposits and margin trading are not yet available.
Current review status
Polylog Labs has published an internal security review. SEAL has not received an independent security audit, and production acceptance of the exact circuits, prover, verification keys, contracts and authorities remains outstanding. See Audits for the report and current scope.
Passing tests, public setup data and fork rehearsals are evidence for review, not independent acceptance. Always match a report to the version and deployment it actually covers.
Contracts and dependencies
A flaw in SEAL contracts or its proof system could permit invalid spending or prevent exits. Aave lending assets depend on reserve solvency, available liquidity and token behavior. Uniswap swaps depend on route liquidity and execution. Tokens can depeg, freeze transfers or introduce other restrictions.
There is no guarantee of principal, yield or immediate withdrawal. An impaired lending market or token restriction can prevent underlying withdrawals; the protocol cannot make an insolvent market whole.
Governance
The guardian controls asset admission, swap routes, bounded fees and spending of earned fees. The guardian is also the immutable fee recipient. The guardian cannot pause user assets or recover them administratively. Route and fee changes affect availability and economics.
SEAL proof verification is fixed at deployment. A future proof-system change requires a separately deployed version and reviewed client. A fixed verifier can still be faulty.
Margin and oracles
Margin creates debt, changing borrowing interest and liquidation exposure. Oracle prices, collateral values, liquidity and MEV can cause losses or failed actions. Markets in a shared account share risk. Read Margin Risk before opening a position.
Liquidation of a margin account does not authorize seizure of separate SEAL notes or another account. This isolation does not eliminate broader contract or dependency failures.
Browser, keys and backup
Use the genuine app site and protect devices with remembered account access. Hiding a balance is not locking the account. Malware, a malicious app build or lost private data can compromise funds.
Keep and test an encrypted backup, including private margin controller keys. A wallet seed alone cannot restore missing records. Archives, Google Drive, RPCs and intent services can fail or become unavailable.
Privacy limits
Deposits, withdrawals, swaps, margin positions and transaction metadata remain observable. Intent services do not guarantee anonymity. Read the canonical Privacy guide and the technical Security Model.
Legal & Risk Information remains available separately.