Resources
Security
Non-custodial architecture, audit status, risk categories, and best practices for safe use.
Non-Custodial Architecture
Fluxtra is fully non-custodial. Smart contracts hold user assets on behalf of depositors, but no admin key or multisig can unilaterally withdraw user funds. You maintain beneficial ownership of your assets at all times.
Smart Contract Audits
Fluxtra's smart contracts are audited by independent security firms prior to mainnet deployment. Audit reports are published publicly. Links to current audit reports are available in the Fluxtra app and on the official GitHub.
Risk Awareness
Using Fluxtra involves the following risk categories:
Smart contract risk — Bugs in Fluxtra's contracts or the underlying DEX contracts could result in loss of funds. Audits reduce this risk but do not eliminate it.
Validator concentration and slashing risk (Liquid Staking) — Fluxtra delegates all liquid-staked MANTRA to a single validator, the OMies v2 validator, selected for community alignment and track record. If the OMies v2 validator behaves maliciously or has a liveness failure, all pooled stMANTRA deposits could be exposed to partial slashing. This is a deliberate design choice: routing the 4% validator commission to the OMies community treasury creates structural alignment between Fluxtra depositors, OMie NFT holders, and the MANTRA Chain validator set. The tradeoff is concentration risk, which Fluxtra discloses transparently rather than distributes away.
Impermanent loss (LP Vaults) — providing liquidity to a trading pair exposes you to impermanent loss if token prices diverge. This is inherent to liquidity provision and not specific to Fluxtra.
Stablecoin risk (RWA Vaults) — mantraUSD could depeg from USD. While it is backed by T-bills via M0 Protocol, smart contract bugs or extreme market conditions could affect the peg. As with stMANTRA, please note that secondary market liquidity depth for mantraUSD is different than redemption value.
Rate risk (RWA Vaults) — T-bill yield rates are set by US monetary policy and can decrease. RWA Vault APY decreases if T-bill rates fall. They increase if T-bill rates increase.
Security Best Practices
- Always verify you are on the correct domain: fluxtra.xyz
- Never share your seed phrase or private key with anyone
- Always verify contract addresses against the canonical source before interacting
- Be skeptical of unofficial social media accounts claiming to represent Fluxtra
Bug Reports
If you identify a vulnerability in Fluxtra's smart contracts or frontend, please report it responsibly through the official security contact listed on fluxtra.xyz or via MANTRA's GitHub.