Audit complete, fixes verified. Dust v0.6.4 is live.
The Dust contracts were audited by
@CredShields , one of the most respected security firms in the space, with a long list of protocols behind them.
Twelve findings, zero critical. We fixed every one, redeployed on new contracts, and
@CredShields re reviewed and marked each fix confirmed. Withdrawals were never affected at any point.
The full report is public, findings and fixes side by side:
github.com/Credshields/audit…
This is exactly what an audit is for. You don't bring in a second set of eyes to be told everything's perfect. You do it to find what you missed while it's still cheap to fix, fix it, and prove it. Every fix in this release ships with a test that replays the auditor's exact scenario.
What it means for you: the contracts running your round-ups have been reviewed twice by a team whose job is breaking things, every keeper action is bounded on-chain, and your money can only move into your own vault or back to your wallet. Not a promise, that's what the code allows.
New in v0.6.4: the audited contracts, a "Stop sweeps" switch, refunds shown on any partially filled purchase, and a cleaner funding screen.
Used Dust before this week? Open
app.roundupdust.com, connect, and the card at the top shows your balance on the old contracts. Withdraw in two clicks, then set your basket and cap again. The old contracts stay withdrawable forever, so no rush.
Thanks to the
@CredShields team for a thorough job and a fast retest.