Know what the protocol guarantees.
Hunty separates user liabilities from administrative authority and keeps exits independent from controls that stop new risk.
Custody invariants
- Every shield credit increases the recorded liability owed to that wallet for that token.
- A fill debits only the trader balance authorized by the signed order and credits the received output to that trader.
- Unshield exits remain available while the protocol is paused and after registry approval expires or is revoked.
- Owner rescue is excess-only: it can transfer only token inventory above aggregate user liabilities.
What pause and approval control
Pause and registry approval can block new shield deposits and settlement activity. They do not erase balances or authorize the owner to seize liabilities. An approval expiry changes eligibility for new risk; it does not cancel the wallet's exit claim.
Privacy and audit boundary
Only pre-trade RFQ intent is private/offchain; shield deposits, contract balances, final fills, and unshield withdrawals are public onchain.
No ZK or anonymity guarantee exists. Hunty is an unaudited beta, so users must independently verify network, token, and contract addresses before signing or sending a transaction.
BetaCore invariants are implemented, but the system has not completed an independent audit.