Skip to security content
Ready to take your Cross-Border Payments to the Next Level!
ContactComing soon, please keep an eye on our launch announcements via our socials

Security, With The Receipts.

Independent review. Clear safeguards. A direct line for the unexpected.

Open To
Inspection.

The findings, the fixes and the decisions.
Published for you to read.

HEXENS

Ledig Protocol Security Review

September 2026Smart contracts
Report a vulnerability
0Critical, high or medium findings
1Low-severity findings
4Informational findings

4 fixed1 acknowledged

As recorded in the published report
View findings and outcomes
  1. LEDIG1-1Low

    Exercise when a writer cannot receive tokens

    Fixed
  2. LEDIG1-2Informational

    Writer allocation on partial exercise

    The allocation trade-off is acknowledged. Proportional allocation was deferred for further testing.

    Acknowledged
  3. LEDIG1-3Informational

    Repeated accounting updates

    Fixed
  4. LEDIG1-4Informational

    Strike-rate decimal limits

    Fixed
  5. LEDIG1-6Informational

    Unused fee-routing permissions

    Fixed

Careful
By Design.

Security starts with how funds, permissions and exits fit together. These principles guide the protocol.

01

Collateral comes first.

Writers must lock the full underlying asset amount before offering an option. Locked collateral is not lent, restaked or reused elsewhere.

Fully backed at entry
02

Each series has its space.

Each series has its own contract, vault and accounting. Settlement follows the writers backing that buyer's position.

Separate series. Clear accounting.
03

Clear roles. Controlled entry.

New buying and writing require approval. A wallet can enter as a buyer or a writer, with separate permissions for each role.

Approved participation
04

Pause risk. Preserve exits.

Pause controls stop new posting and buying. They are designed to preserve eligible exercise, cancellation and withdrawals under the contract rules.

Exits stay explicit.

Found something we
should see?

If you suspect a vulnerability in Ledig's website, services or protocol, report it privately to our team.

security@ledig.io