> For the complete documentation index, see [llms.txt](https://docs.mineglyph.xyz/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.mineglyph.xyz/security/audits-and-status.md).

# Audit status & risks

> **Read this before interacting with real funds.** This page states the honest status of the protocol and the risks you accept by participating.

## Current status

| Item                           | Status                               |
| ------------------------------ | ------------------------------------ |
| Smart contract test suite      | ✅ passing (unit + fuzz + invariants) |
| Local end-to-end test          | ✅ passing                            |
| Testnet deployment             | ✅ live on Robinhood Chain testnet    |
| **Third-party security audit** | ❌ **not yet completed**              |
| Testnet soak / bug bounty      | 🚧 in progress                       |
| Mainnet deployment             | ⏳ pending audit                      |

Our own tests are thorough, but **internal testing is not a substitute for an independent audit.** Until a reputable third party has reviewed the contracts, you should treat the protocol as experimental.

## Known risks

**Smart-contract risk.** The contracts are unaudited at the time of writing. Bugs, even with extensive testing, are possible. A deployed contract is immutable — it cannot be patched after the fact.

**Signer-key risk.** Hashrate attestations depend on an off-chain signer key. If that key is compromised, an attacker could sign inflated hashrates until the key is rotated. See [Security model](/security/security-model.md).

**Admin-key risk.** Until the token admin role is renounced on-chain, the admin wallet can grant minting rights. Verify the admin state of any deployment before relying on the supply cap.

**Market risk.** GLYPH has no guaranteed value. Its price, if any, is set by open markets and can go to zero. Mining rewards are denominated in GLYPH, not in fiat.

**Economic-parameter risk.** Emission schedule, fee, and cooldown are set at launch; some parameters (fee, signer) are owner-adjustable. Review the live parameters yourself.

**Network risk.** Robinhood Chain is a Layer-2 network with its own operational and bridge risks, independent of Mine Glyph.

**Regulatory risk.** The legal treatment of tokens varies by jurisdiction and may change. You are responsible for your own compliance.

## What we recommend

* Only interact with funds you can afford to lose entirely.
* Verify contract addresses against [Contract addresses](/resources/contract-addresses.md) and the official channels — never trust an address from a DM or unofficial source.
* Wait for the third-party audit before committing significant value.
* Check the on-chain admin/owner/signer state yourself if the cap and trust-minimization matter to you.

## No financial advice

Nothing in this documentation is financial, investment, legal, or tax advice. Mine Glyph is an experimental protocol provided "as is," without warranties. See the [Terms of Service](/legal/terms.md).


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.mineglyph.xyz/security/audits-and-status.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.