No. 10 · Trust
Contracts and security
The addresses to use, who can do what to the contracts, and what has and hasn’t been checked.
Addresses#
All on Ethereum. Check you have the right address before you trust anything.
| Contract | Address |
|---|---|
| USDh | 0xbcFC42391e55484129191eDfcC766a2c6F9eb503 |
| sUSDh | 0x0a2F67c696B3845DaceEf73fa7982FEA77e678C2 |
| Timelock | 0x9461fFd88eC07884338C7a2dB648D4d82F0a98D3 |
Who can do what#
| Power | Held by | Speed |
|---|---|---|
| Change the code, the rate cap or other settings | The timelock contract | Only after 48 hours’ public notice |
| Pause everything, freeze one address, switch off a stablecoin that has lost its peg | An emergency wallet that needs several signatures | At once |
| Set or pause the sUSDh reward rate, add or take out USDh in the staking contract | A staking protocol wallet that needs several signatures, overseen by Publius Foundation for now. Not the USDh issuer | At once, within the cap |
| Make new USDh | Only against dollars or USDC that came in, from approved Mint User wallets | At once, within a daily limit |
What no wallet can do: take or move your balance. Emergency powers can only stop things.
The full list of roles and how to check each one is on docs.hamilton.xyz.
Independent checks#
| Check | Status |
|---|---|
| Audit of the USDh and sUSDh contracts by an independent firm | Planned The firm, date and full report will be listed here |
| Monthly reserve reports by an independent firm | Planned Reports will be on the Transparency page in the app |
| Public bug bounty | Planned Scope and rewards will be announced here |
Until then, you can check the contracts, supply and every admin change yourself. See Check it yourself.
Built on#
Small contracts on top of OpenZeppelin, open-source code used across Ethereum: the token standard, permissions, pause and gasless approvals. Every change path waits 48 hours in public.