Level Vulnerability Disclosure

generated: '2026-07-19'
method: searched
probe: true
source: https://level-money.gitbook.io/level-documentation/technical-documentation/security
program: bug-bounty
platform: Cantina
policy:
- https://cantina.xyz/code/c463283d-b278-4d95-8d9c-e3e4cb0f8f63
- https://cantina.xyz/bounties/c463283d-b278-4d95-8d9c-e3e4cb0f8f63
- https://level-money.gitbook.io/level-documentation/technical-documentation/security
contact: []
security_txt: null
audits:
- firm: Pashov
  scope: Level v2
  date: '2025-04'
  url: https://storage.googleapis.com/level-public/audits/%5BPashov%5D%20Level%20v2%20Security%20Review.pdf
- firm: 0xMacro
  scope: Level v2
  date: '2025-04'
  url: https://storage.googleapis.com/level-public/audits/%5B0xMacro%5D%20Level%20v2%20Security%20Review.pdf
- firm: Spearbit Cantina
  scope: LevelReserveLens, BoringVault
  date: '2025-02'
  url: https://storage.googleapis.com/level-public/audits/LevelReserveLens%20%2B%20BoringVault%20-%20Spearbit%20Cantina.pdf
- firm: Spearbit Cantina
  scope: lvlUSD v1.1 + Staked lvlUSD
  date: '2024-10'
  url: https://storage.googleapis.com/level-public/audits/lvlUSD%20v1.1%20%2B%20Staked%20lvlUSD%20-%20Spearbit%20Cantina.pdf
- firm: Spearbit Cantina
  scope: lvlUSD v1
  date: '2024-09'
  url: https://storage.googleapis.com/level-public/audits/lvlUSD%20v1%20-%20Spearbit%20Cantina
- firm: Zellic
  scope: Stablecoin Points Farm
  date: '2024-09'
  url: https://storage.googleapis.com/level-public/audits/Points%20Farm%20-%20Zellic%20Audit%20Report%20(1).pdf
controls:
- Admin multisig is a 5-of-8 Gnosis Safe with cold-wallet signers, including external security firms (Spearbit).
- Operator multisig is a separate 2-of-5 Gnosis Safe limited to low-risk tasks and cannot move protocol
  funds.
- Protocol treasury multisig is a separate 3-of-4 Gnosis Safe.
- On-chain monitoring by Hexagate with automatic contract pausing on critical issues (turned off from
  October 2025 as part of the shutdown).
evidence:
- source: https://level-money.gitbook.io/level-documentation/technical-documentation/security
  kind: security-page
  keywords: [bug bounty, cantina, audits, multisig, on-chain monitoring]
- source: https://level-money.gitbook.io/level-documentation/technical-documentation/audits
  kind: audits-page
  keywords: [bug bounty, spearbit, zellic, pashov, 0xmacro]