Prevent
Minimal immutable accounting, isolated custody, checked arithmetic and bounded governance powers.
Woodlark’s security model starts with what can go wrong: stale prices, thin liquidity, missed maturity, compromised services and human mistakes.
No individual control carries the safety case on its own.
Minimal immutable accounting, isolated custody, checked arithmetic and bounded governance powers.
Oracle deviation checks, invariant monitoring, indexer reconciliation and operational canaries.
Per-market caps, guardian pause, position isolation and a reserve-first principal-loss waterfall.
Public runbooks, deterministic deployments, RPC failover and Safe-controlled migrations.
The security specification makes guardian and owner permissions asymmetric: the guardian can stop new risk, while the 2-of-3 owner Safe directly controls bounded configuration. Neither role can withdraw lender principal.
Inspect contract rolesSix complementary disciplines define the scope of Woodlark’s engineering review.
Critical lifecycle transitions, authorization paths and accounting boundaries.
Amounts, decimals, prices, timestamps and malicious token behaviour.
Asset conservation, unit solvency, collateral isolation and debt consistency.
Target-chain validation of canonical WETH, selected collateral, reference feeds and DEX routes.
Failure exercises for RPC loss, stale prices, keeper duplication, reorgs and partial infrastructure loss.
Wallet mismatch, stale quotes, rejected simulations and accessible error recovery.
The interface exposes the same deadlines, limits and contract identities that the wallet validates before a signature is requested.
Each loan keeps collateral and automated-exit proceeds inside its own minimal vault.
Price-sensitive actions use validated, fresh inputs and reject excessive source deviation.
Deadlines, slippage bounds and locally reproduced calldata limit what a wallet can sign.
Keepers can execute only public valid actions and never receive custody or withdrawal rights.
The guardian can pause new risk while repayment and collateral top-up paths remain available.