Security

• Non-custodial: users sign every transaction; agent funds sit in vaults only the owner can withdraw from.
• Least privilege: each program can only call the programs it needs, with ids compiled into the binary.
• Post-condition checks: buybacks and agent actions verify balances after the fact and revert on any mismatch.
• Rounding in favour of pools and vaults everywhere.
• Token-2022 extensions that could move or freeze pool funds are rejected.
• Destinations for protocol revenue change only through a 48 hour public timelock.

Every program has unit tests and an end-to-end test that runs on a local Solana validator at its real program id, with more than 60 assertions covering the happy paths and the attacks: wrong signers, redirected fees, slippage, limit breaches, paused and expired mandates, spoofed routers. The deploy flow itself is tested end to end, including in the browser.

Found a vulnerability? Do not exploit it or share it publicly. Contact the team privately through the official VYLO channels with a description and steps to reproduce.