Orbit Protocol (ORB) security report
The latest implementation removes previously identified transfer-lock risk and constrains upgrade execution behind a timelock. One medium governance dependency remains.
No Critical or High finding remains open in the latest verified implementation.
Trust score: 91/100. Source verified: Yes. Chain: Ethereum. Contract: 0x24eB9C2e3F91D940f59D1F6efA68E3B593f17C42.
This report was last modified on 2026-09-19 and contains 1 material finding.
medium finding: Governance execution depends on external multisig policy
The on-chain timelock is effective, but signer concentration and off-chain key practices remain outside contract guarantees.
Evidence: Timelock proposer and executor roles are assigned to the project multisig.
Recommendation: Publish signer policy, threshold, and incident-response procedures.