> For the complete documentation index, see [llms.txt](https://delpho.gitbook.io/delpho-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://delpho.gitbook.io/delpho-docs/audits-and-security/audit-register.md).

# Audit register

Delpho's smart-contract layer has been audited by Sherlock. The audit scope covered USDV mint contracts, sUSDV staking, the hedge orchestrator, Chainlink Oracle and the CoreWriter integration. Fuzz testing and Slither static analysis run on every pull request in the development pipeline.

<table><thead><tr><th>Auditor</th><th>Scope</th><th width="149">Date</th><th>Status</th><th>Report</th></tr></thead><tbody><tr><td>Sherlock</td><td>USDV mint contracts, sUSDV staking, hedge orchestrator, CoreWriter integration</td><td>July 2, 2026</td><td>Complete</td><td><a href="https://sherlock-files.ams3.digitaloceanspaces.com/reports/2026.07.01%20-%20Final%20-%20Delpho%20Collaborative%20Audit%20Report%201782919020.pdf">Report Link</a></td></tr></tbody></table>

## Audit posture

Audits are one input to security, not the whole answer. Delpho's security posture combines:

* Smart-contract audits, as above.
* Continuous static analysis and fuzz testing in the development pipeline.
* Ongoing quantitative risk modeling. See [Risk advisor reports](/delpho-docs/audits-and-security/risk-advisor-reports.md).

This layering is intentional. No single line of defense is sufficient.

## Adding future audits

As scope changes ship (new contracts, new collateral adapters, V1.1 features), new audits will be added to the register with date, scope, and report link. This page is a living record, not a one-time credential.