Security & upgrades

What DeVOLT can and cannot do with your money, what the owner of the contracts can change, and, the part most pages like this leave out, what has not been proven yet.

What the code does today, and who can change it

What the code deployed today does not do

until it is upgraded

Start a transaction on your position. Each one begins with a transaction you sign.

Close your position, or act for you while the price moves and you are away.

Hold your position. It sits at the venue, on your own address or in a contract created for you.

What the owner can change

real powers, listed below

As of October 2026, the main contract is owned by a timelock, not by a single key. A Safe, a wallet that needs more than one signer to act, controls the timelock.

An upgrade can still replace the code in the left column, and the new code can use every permission and approval you have granted DeVOLT’s contracts, on positions already open as well as new ones.

Every change has to be scheduled on the timelock first, as a public transaction, and can only take effect after a waiting period that is set on chain and that anyone can read. That window is your notice.

A security page that lists only the left column is marketing. Both columns describe the same product, and the right one is the reason the left one is worth reading.

DeVOLT never holds your funds, and nothing in the app sends a transaction for you: every transaction it prepares is signed by you. It does not close your position, and it does not act if the price moves while you are away. What your signature does not limit is the owner’s power to upgrade the main contract, described below.

When you open a position you approve DeVOLT’s main contract to spend the token you deposit, and on some venues you also give DeVOLT’s contracts permission to act on your account there. Neither expires on its own. They name DeVOLT’s main contract, or an adapter that takes its instructions only from it, and the main contract can be upgraded, so they are only as trustworthy as the group that controls the timelock which can upgrade it. You can revoke them at any time: an approval from any wallet tool, and a venue permission by calling the venue contract’s own switch, for example Morpho’s setAuthorization set to false. On Morpho, the leverage panel’s Revoke Morpho authorization does that for you; for the other venues DeVOLT has no screen yet. Revoke only what no open position uses, because a close through DeVOLT needs it. The one exception is the Morpho authorization: a close through DeVOLT asks you to sign it again first, which costs one more signature and the gas of that transaction.

Where a position lives

On some venues the position sits on your own address and you can manage it in that venue’s own app without DeVOLT existing at all. On others it sits in a contract created for you. DeVOLT’s adapter for that venue drives it, and you, as its owner, can also call it directly. The Custody chapter covers the difference and why it matters when you want to leave.

What the owner can change

Each of these is adjustable by whoever owns the contracts, which today means a timelock that a Safe controls, and named here for the reason above. Apart from the pause, each is scheduled in public first and waits before it takes effect.

the fee: The share of the flash loan that a transaction charges, in the loan token. The contract refuses any value above its own hard ceiling, so the limit is enforced rather than promised, for as long as that contract is not upgraded. The chapter on what it costs states both.
approved routers: Which trading contracts a swap may be routed through. An address that is not on the list cannot be used, which is what stops arbitrary code being called with your funds mid-transaction.
adapters: Which contract drives which lending venue. Registering a new one does not move an existing position, but a position inside a per-user contract is driven by the adapter it was opened with, so pointing its venue elsewhere would cut that route through DeVOLT.
the pause: Stops new opens and increases through DeVOLT’s main contract. It never stops an exit: closing and reducing a position keep working while it is on, including one inside a per-user contract. It is the one power with no waiting period: a guardian, a role held by the same Safe, can switch it on or off at once, and can do nothing else.
upgrades: As of October 2026, the owner of the main contract is a timelock. An upgrade has to be scheduled there first, as a public transaction, and can only be carried out after a waiting period that is written on chain and that anyone can read. The timelock is controlled by a Safe, a wallet that needs more than one signer to act. An upgrade can change everything on this list, and the new code can use every permission and approval you have granted DeVOLT’s contracts, on positions already open as well as new ones. The waiting period is the notice you get: if you do not want to be there when an upgrade lands, close or revoke before it. The signers are chosen by DeVOLT, so this protects against one mistake or one stolen key, and it does not put the upgrade power out of their hands. Revoke any permission you no longer need.

How changes to the code are checked

Contract behaviour is exercised against forks of the live chains: the real contracts, at a recent block, with real quotes from real aggregators rather than stand-ins. A position is opened and unwound, and the result recorded with the date it was taken. The Verification chapter explains what the resulting badge does and does not claim.

What has not been proven

A security page that lists only reassurances is marketing. So, plainly: much of the recent contract work has been exercised on forks and in tests, and has not been driven end to end by a real wallet holding real funds.

None of that means the code is wrong. It means the evidence for it is fork evidence and test evidence rather than production evidence, and you should size any position with that in mind.