Dolomite’s core and module contracts have undergone six independent audits by Zeppelin Solutions, Bramah Systems, SECBIT Labs, Cyfrin, Zokyo, and Guardian. Every production contract maintains 100% line, statement, and branch test coverage.

The protocol’s dual-repository structure, Core and Modules, separates immutable architecture from active development, minimizing risk, isolating upgrades, and evolves new integrations without compromising security.

Dolomite’s open bug bounty program rewards responsible disclosures under the OWASP risk framework. Users who submit vulnerabilities shall receive recognition and monetary rewards.