Security
Security documentation
Quick answer
Elevate contracts are built on OpenZeppelin, guard every entry point against reentrancy, can be paused, hardcode the maximum marketplace fee, and give the owner a scoped role. The backend never holds user private keys.
This page documents controls. Claims about audits, verification criteria and user safety live on the Security and Verification pages, with links back here for detail.
Who this is for
Developers and security-minded collectors. For the plain-language trust overview see the Security page.
In this section
Contract controls
| Control | Detail |
|---|---|
| OpenZeppelin foundations | Access control, pausability and reentrancy protection come from audited libraries rather than bespoke code. |
| Reentrancy protection | Every state-changing entry point is guarded. |
| Emergency pause | The owner can pause minting; pausing cannot move or burn tokens. |
| Hardcoded caps | The maximum marketplace fee is fixed at deployment and cannot be raised. |
| Input validation | Quantity, phase, payment and signature inputs are validated on every public function. |
Access control
Contract owners can pause and unpause, update fees within the hardcoded cap, change fee recipients and manage phase configuration before a phase starts. Each of these is restricted to the owner role. The owner cannot mint outside the phase rules, seize tokens, or change a phase that has already begun.
Platform controls
- Minting requires your own wallet to sign; the site cannot initiate a transaction on your behalf.
- The backend never stores user private keys. The only key it holds is the allowlist signer, which can approve a mint but cannot move funds or tokens.
- Allowlist signatures are bound to a wallet and phase, so they cannot be reused elsewhere.
- Everything the site checks before you sign is checked again by the contract.
Reporting a vulnerability
Report suspected vulnerabilities privately through the official Discord to a team member, not in a public channel. Do not test against live collections.
Sources
Written and maintained by the Elevate team. Last updated . Corrections: reach the team on the official Discord.
Related
Ready to mint? View verified Bittensor NFT collections.