Security
Anointed DeFi is a non-custodial demo that runs production-grade risk controls on simulated assets. The same checks an audited protocol would enforce — slippage protection, health-factor guards, hashed credentials, rate-limited APIs — apply to every action, so the experience mirrors a real protocol without putting real funds at risk.
Security model
Six controls that govern how the demo protects positions and credentials.
Non-custodial demo wallets
Each account gets its own simulated wallet. The protocol never takes custody of balances — every action is signed against your own demo keys and scoped to your session.
Constant-product AMM
Swaps execute against a real x · y = k curve with explicit slippage tolerance and price-impact limits. Trades that would exceed your tolerance are reverted before they settle.
Health-factor liquidation guard
Borrows and withdrawals are blocked the moment they would push your health factor below 1.0. Positions are continuously revalued so collateral and debt stay in sync.
JWT + bcrypt authentication
Passwords are hashed with bcrypt and never stored in plaintext. Sessions use short-lived, signed JWTs with rotation, so a leaked token cannot be replayed indefinitely.
Rate-limited APIs
Every public endpoint is throttled per IP and per account with input validation on each request, mitigating brute-force, scraping, and abuse of the quoting engine.
No real funds at risk
All assets are simulated. The platform holds no custody of real crypto or fiat, so there is nothing for an attacker to drain — it is a faithful sandbox of production mechanics.
Audits & reviews
Illustrative methodology reviews of the demo's accounting and risk logic. Each pass below is representative of how a production deployment would be assessed.
Smart-contract methodology review
Anointed Labs · AMM, lending and vault accounting logic
Feb 2026 PassedAMM math verification
Anointed Labs · Constant-product invariant, slippage & price impact
Mar 2026 PassedAuth & session review
Internal security · JWT lifecycle, bcrypt hashing, rate limiting
Apr 2026 PassedLiquidation engine review
Anointed Labs · Health-factor enforcement & collateral revaluation
May 2026 Passed
Bug bounty
A demo program with illustrative reward tiers. We welcome responsible disclosure of any issue, even on a simulated platform.
Responsible disclosure
Reward amounts are illustrative for this demo program.
up to $25,000
Direct theft of funds, protocol insolvency, or full auth bypass.
$10,000
Privilege escalation, oracle manipulation, or accounting corruption.
$2,500
Logic flaws with limited impact or partial denial of service.
$500
Minor issues, informational disclosures, and hardening gaps.
Found something? Email our security team with steps to reproduce.
Report a vulnerabilityFrequently asked
The short version: it is a sandbox with real mechanics and no real money.
Is this real money?
No. Every token, balance, pool, and yield figure on this platform is simulated. Nothing you do here moves real crypto or fiat, and no deposits are ever requested.
Who can see my data?
Your demo positions and history are scoped to your account. We store an email and a bcrypt-hashed password for sign-in; we never ask for seed phrases, private keys, or payment details.
Can I lose funds?
There are no real funds to lose. The risk engine (slippage limits, health-factor guards) exists to faithfully reproduce how a production protocol protects users — not because real value is at stake.
Do you take custody of assets?
No. The model is non-custodial by design. Demo wallets are controlled by your session, and the protocol never holds, pools, or rehypothecates real assets on your behalf.
How do you handle vulnerabilities?
Report anything you find to our security team. We triage demo-program reports, acknowledge receipt, and credit valid findings. See the bug-bounty tiers above for scope and illustrative rewards.
This is a demo. All assets are simulated and no real funds are ever at risk. Read the docs for how each mechanism works.
Read the docs