Home / Security and audits

Security

Audited before anyone deposits.

Contracts are independently reviewed by Halborn before they go live on a chain, and every report is published in full, findings included.

Security claims need proof.

Two independent Halborn assessments, published in full rather than summarized.

Complete

Stellar contracts

splyce-stellar-s-token

Auditor

Halborn

Period

June to July 2026

Scope

Vault, factory, accountant, oracles, asset manager, multisig

Complete

Solana programs

splyce-solana-s-token

Auditor

Halborn

Period

December 2025 to January 2026

Scope

S-Token program and NAV oracle

Planned

Sui contracts

before launch on Sui

An independent audit is planned ahead of launch on Sui, on the same basis as Stellar and Solana. The report will be published here on completion.

What this protects, and what it does not.

An audit narrows the risk. It does not remove it, and we are not going to imply otherwise.

Structurally handled

Built into how the protocol works

  • Splyce never custodies funds. Deposits and collateral sit in onchain contracts, and collateral is held in escrow for the loan term.
  • Every vault is isolated to one borrower and one collateral type, so a default is bounded by the vault it happens in.
  • Every borrower completes KYC and signs a Master Loan Agreement with Splyce Finance Ltd. The obligation is legal as well as onchain.
  • Loans are overcollateralized at a ratio approved by the risk committee before a vault opens.
  • Contracts are independently audited before deployment on each chain, and reviewed again as the protocol changes.

Residual risk

What no audit or structure removes

  • Smart contracts carry residual risk. Bugs and unforeseen edge cases remain possible in any onchain system.
  • Borrowers can default. Recovery depends on the collateral and on the resolution path agreed when the vault opened.
  • Real-world assets can underperform and credit conditions can deteriorate.
  • Target yields are targets. They are not guaranteed, and past performance of the underlying assets says nothing about future results.
  • There is no deposit insurance, and nothing on this site is financial advice.

Common questions about security.

Is Splyce audited?

Yes. The Stellar contracts and the Solana programs have both been independently assessed by Halborn, and both reports are published above in full. An audit of the Sui contracts is planned before launch on Sui.

Is Splyce custodial?

No. Splyce never holds your funds. Deposits and collateral are managed by onchain smart contracts, and in Single Asset Vaults collateral is held in escrow for the duration of the loan term. Splyce Finance Ltd has no ability to access or move your assets.

What risks should I be aware of?

Smart contracts carry residual risk. Real-world assets can underperform, borrowers can default, and credit markets can deteriorate. Target yields are illustrative and not guaranteed, and each product carries its own risk disclosures. Nothing here is financial advice.

What happens after launch?

Security is treated as ongoing rather than a one-time event: re-audits as contracts change, continuous monitoring of onchain activity, and a bug bounty program for responsible disclosure.

Who is the counterparty to a loan?

Splyce Finance Ltd is the counterparty to every Master Loan Agreement. Borrowers are onboarded through KYC and their collateral is approved by the risk committee before a vault opens.

Stay updated

Be the first to hear about news from Splyce.