Audits
Audits, risk assessments, and AML enforcement that make Plume Vaults secure.
Audits
Plume Vaults is designed to meet the highest standards of onchain safety, financial transparency, and global compliance.
Smart Contract Audits
Plume Vaults' modern vault architecture is audited as a layered system: vault custody and share issuance, accounting, compliance gating, cross-chain share movement, and transaction orchestration.
Plume Vault Audit Coverage
| Date | Coverage area | Scope | Auditor | Report |
|---|---|---|---|---|
| 2026/04/10 | Integrated Plume Vault stack | Plume Vault, share, accountant, and cross-chain orchestration contracts | Cantina | View report |
| 2026/01/07 | NestVault core contracts | NestVault, NestAccountant, NestShare, and NestVaultOFT | Cantina | View report |
| 2026/01/07 | Cross-chain infrastructure | Nest CCTP relayer and OVault composer | Cantina | View report |
What the Plume Vaults Audits Cover
| Layer | Primary contracts | Responsibility |
|---|---|---|
| Vault custody and share issuance | NestVault, NestVaultCore, NestShareOFT | Custody assets, mint and burn vault shares, and maintain ERC-4626, ERC-7540, ERC-7575, and OFT-compatible behavior. |
| Accounting and pricing | NestAccountant | Maintain vault exchange rates, fee accounting, and pricing guardrails. |
| Compliance and access control | NestVaultPredicateProxy, RolesAuthority | Enforce eligibility and authorization before users enter supported vault flows. |
| Cross-chain orchestration | NestVaultComposer, NestCCTPRelayer, NestShareOFT | Coordinate same-chain and cross-chain deposit and share movement flows. |
Legacy BoringVault Audit History
BoringVault audit reports are included for historical context around the legacy strategy engine and inherited vault primitives. The modern Plume Vaults user-facing architecture is represented by the Plume Vault audit coverage above.
| Date | Scope | Auditor | Report |
|---|---|---|---|
| 2024/03/20 | BoringVault smart contracts | 0xMacro | View report |
| 2024/04/19 | BoringVault smart contracts | Spearbit | View report |
| 2024/04/22 | BoringVault follow-up audit | 0xMacro | View report |
| 2024/07/13 | Nucleus cross-chain infrastructure | Pashov | View report |
| 2024/12/16 | Nucleus + Hyperlane integration | Pashov | View report |
Tokenized Risk Assessments
Vaults include detailed disclosures and analysis for its underlying assets.
Risk Framework Includes:
- Tokenized risk assessments by Cicada Partners, a leading institutional credit risk firm
- Third-party audits and prospectuses
- Asset-level data on:
- Collateralization
- Redemption timing
- Counterparty exposure
- Regulatory classification
You can browse all risk assessments and asset details directly on the Plume Vaults Transparency Board.