Audits

dreamDEX prioritizes the security of user funds above all else. Our security strategy includes rigorous internal testing, comprehensive external audits, and an ongoing bug bounty program.

Built on Somnia

dreamDEX is built on the Somnia blockchain, a high-performance Layer 1 designed for real-time applications. By building on Somnia, dreamDEX inherits the robust security practices and infrastructure of the Somnia network.

Inherited Security Practices

Somnia follows industry-leading security standards, including:

• Smart Contract Security: Comprehensive guidelines for secure smart contract development
• Audit Processes: Rigorous audit checklists and verification procedures
• Infrastructure Security: Battle-tested node and infrastructure security protocols
• Responsible Disclosure: Clear policies for reporting vulnerabilities

For more information on Somnia's security practices, see the Somnia Security Documentation.

Audit Status of dreamDEX Smart Contracts

Current Status: The dreamDEX spot protocol has completed external audit with Hacken. The report is published on Hacken's audit page: hacken.io/audits/somnia.

Spot Protocol — Hacken (April 2026)

The audit covered the matching engine, order lifecycle, vault accounting (including native token support), fee model, mark-price emission, and the on-chain reactivity integration that powers stop orders. The findings raised during the engagement and the protocol team's remediations are detailed in the published report.

USDso Swap Contract — Sherlock

USDso, the stablecoin used as the quote token across dreamDEX spot markets, is backed 1:1 by FraxUSD via LayerZero. The USDso swap contract is being audited by Sherlock as a separate engagement. See the Roadmap for context on how USDso fits into v1.0.

Future Audits

Additional audits will be commissioned ahead of any major protocol upgrade. Audit firms and scopes will be listed here once engagements are finalized.