Application

Security

Smart contracts are audited. AI-based Crypto Fraud Score is used for transaction monitoring. System design protects from hacking.

Last updated:

Key Takeaways

  • SmartCredit.io smart contracts have been independently audited by Pessimistic Security and Immunebytes; audit reports are publicly available.
  • SmartCredit.io has no access to client funds: the matching engine can only trigger flows between credit lines and Fixed Income Funds, never move client assets to a company address.
  • AI-based Crypto Fraud Score (via ChainAware.ai) monitors every connected wallet address in real time and blocks flagged addresses from transacting.
  • Fixed-term loan design eliminates flash loan attack vectors: borrowing and repaying in the same transaction is structurally impossible.
  • AI-based Crypto Trust Score is used as a credit scoring layer for every borrower.

The following security mechanisms are used:

  1. SmartCredit.io contracts are audited.

  2. SmartCredit.io has no access to client funds:

  3. SmartCredit.io has no access to the credit lines or to the fixed-income funds (except in case of liquidations, but client funds are then protected with the oracles).

  4. The SmartCredit.io matching engine can only trigger asset flows between the credit lines and fixed-income funds.

  5. SmartCredit.io uses extensive AI technology for security:

  6. AI-based Crypto Fraud Score is used for Continuous Transactions Monitoring to exclude the "bad addresses" from participating in the platform.

  7. AI-based Crypto Trust Score is used automatically for credit scoring any borrower.

  8. SmartCredit.io is protected with the system design:

  9. Most of Money-Market-Funds are exposed to flash loan attacks - the attacker can take a flash loan and modify in the same transaction the price of collateral, take a loan, and pay back the loan. This exposes Money-Market-Funds to a wide range of attacks.

  10. SmartCredit.io is a fixed-term loan system. One cannot borrow and pay back the loan in the same transaction. Hence, one cannot use flash loans to attack the system. Which significantly reduces the potential attack vectors.

Further info