Audits and Security
Audited with OpenAI Daybreak
- OpenAI’s cyber defense stack combines frontier AI and Codex tooling to work through complex investigations across thousands of reasoning steps, helping uncover vulnerabilities and verify fixes.OpenAI Daybreak
- We audited MPPI’s smart contract, Python and Rust SDKs, and payment flows with Daybreak throughout development. Findings drove fixes and regression tests, followed by a final security review before release.Public source
Tested across the lifecycle
- Smart contracts · 25 September 2026. 70 tests passed, with 4,096 randomized cases and 32,768 simulated lifecycle actions.Contract tests
- SDKs · 6 October 2026. 1,170 Python tests passed, alongside Rust conformance, contract and package checks.Python and Rust SDKs
- Live exchange. Arc testnet and mainnet checks exercised inference, USDC collection and refunds with Python and Rust providers.Networks and contracts
Protection built into the protocol
- Bounded payments. USDC collection stays within the funded deposit and signed payment ceiling. Additional funding is an explicit wallet action.Payment limits
- Unused funds return to your agent. Eligible close and withdrawal paths refund the remaining USDC to the funding wallet.Close and refund
- Verified connections. The agent SDK checks the selected provider’s registry identity, offering and trusted deployment before opening a funded session.Provider discovery
- Controlled upgrades. MPPI’s proxy keeps a stable address. Upgrades go through the governance timelock, deployed with a 24-hour mainnet delay. Delay changes also require a timelocked operation.Proxy and timelock
- Emergency pause. The guardian can stop new payments while eligible exits remain available. A timelocked full pause also blocks exits.Pause controls