Trust · Security & Audits

Institutional guardrails at every layer.

Strata is engineered to the standards of a regulated financial institution. Independent auditors verify the code, qualified custodians hold the assets, and a bankruptcy-remote structure protects claimants. This page summarizes those controls; the underlying reports are linked in full.

Smart-contract audits
4 firms
Custody counterparties
3 qualified
Attestation cadence
Daily
Reserves attested
102.3%
Smart-contract audits

Reviewed by the firms that review the industry.

FirmScopeDateFindingsReport
Trail of BitsCore protocol · v2.0Apr 20260 critical · 0 highPDF
OpenZeppelinAccess control & upgrade moduleFeb 20260 critical · 1 high (resolved)PDF
SpearbitVault accounting & redemptionNov 20250 critical · 0 highPDF
CertoraFormal verification · invariantsSep 202512 invariants provenPDF

All findings above medium severity are remediated prior to production deployment. Contract source is verified on-chain and reproducible from tagged commits in the public repository.

Custody & regulated partners

Assets held by the same institutions that safeguard traditional funds.

Cash custody
BNY Mellon

Segregated, bankruptcy-remote SPV accounts

Digital-asset custody
Coinbase Prime · Anchorage Digital

Qualified custodians, cold-storage majority

Investment advisor
Strata Asset Management, LLC

SEC-registered · CRD #327891

Independent attestor
Ernst & Young LLP

Daily reserve attestation, monthly SOC report

Trustee
Wilmington Trust, N.A.

Delaware series-trust structure

Insurance
Aon · Lloyd's syndicate

Crime & specie coverage up to $500M

Transparency

Every line reconciled, every day.

Reserves are published daily as an on-chain proof and a downloadable attestation from Ernst & Young. Reconciliation between the trust ledger and on-chain supply runs every block. Historical attestations are permanently archived on IPFS.

Responsible disclosure

Bug bounty · up to $1,000,000

Strata runs a live bug bounty program on Immunefi. Critical findings in production contracts qualify for rewards up to $1,000,000 USDC. Responsible disclosure is expected; safe-harbor terms apply.

Submit a report
security@strata.finance · PGP 0x4A9C 7D3E …

Strata Asset Management, LLC is an investment advisor registered with the U.S. Securities and Exchange Commission. Registration does not imply a certain level of skill or training. Tokenized instruments involve risk, including loss of principal. Availability may be restricted in certain jurisdictions. See the Risk Framework for a full description of material risks.