Security

The Protocol is designed not to be invulnerable, but to make suppression more expensive than accommodation.

Wargaming Framework

Eight attack vectors were analyzed. Each is rated by feasibility and effectiveness:

Vector	Feasibility	Effectiveness	Mitigation
OFAC/SDN designation	High	Low	Above it, the system has sufficient network effects and jurisdictional diversity that suppression may be physically impossible without global coordination that does not currently exist. Pause Architecture Emergency pause is decentralized across three layers: Emergency Council (3-of-5): Zero timelock. 72-hour maximum duration. Federation (5-of-9): 48-hour timelock. 14-day maximum duration. Constitutional Lock (7-of-9 + LLM): Once per lifetime. Irreversible. Hardening Measures No blacklist function in any token contract No admin key with unilateral upgrade power No pause function callable by a single address Time-delayed upgrades with forced exit window On-chain transparency for all treasury movements On This Page

Vector

Feasibility

Effectiveness

Mitigation

OFAC/SDN designation

High

Low

Above it, the system has sufficient network effects and jurisdictional diversity that suppression may be physically impossible without global coordination that does not currently exist.

Pause Architecture

Emergency pause is decentralized across three layers:

Emergency Council (3-of-5): Zero timelock. 72-hour maximum duration.
Federation (5-of-9): 48-hour timelock. 14-day maximum duration.
Constitutional Lock (7-of-9 + LLM): Once per lifetime. Irreversible.

Hardening Measures

No blacklist function in any token contract
No admin key with unilateral upgrade power
No pause function callable by a single address
Time-delayed upgrades with forced exit window
On-chain transparency for all treasury movements