// Security \\
Every rule is in the code.
Check it yourself.
PANTHEON is live on the Elysium testnet and hasn’t been audited yet. This page lists every contract, every key and what it can do, and how we test them.
Every contract we wrote is verified on the Elysium explorer.
No owner where the money is
Covenant, staking and the basket vault have no owner, no admin key and no upgrade. Nobody can take what they hold, including us.
Small, slow powers
The keys that exist can only propose or block a basket list, which waits 24 hours, or sign Passports that expire within 8 days. Staking caps any Passport boost at 1.25×.
Tested against real Ascend
24 contract tests, 7 of them against a copy of Ascend’s live testnet, including a 1,000-run test that stakers can never be paid more than came in. Slither, the standard automatic checker, found nothing real.
Every contract
All live on the Elysium testnet. Every contract we wrote is verified on the explorer. PNTH itself is a standard Ascend token, made by Ascend’s launchpad.
| Contract | What it does | Address |
|---|---|---|
| PNTH | The token: a standard Ascend coin with a fixed supply of 1 billion. | 0x048a…b1C5 |
| Covenant for PNTH | Takes PNTH’s fees and does its jobs: burn on sells, basket on buys. | 0xE0Fb…8b66 |
| Covenant factory | Launches coins on Covenant, for anyone. | 0x42b9…a35a |
| Basket list | The coins in the basket: proposals, the 24-hour wait, vetoes. | 0xD8cE…6087 |
| Basket vault | Buys the basket near Ascend’s own average price, then pays it out. | 0xE636…f221 |
| Staking | Holds staked PNTH and streams the basket to stakers. | 0x30c8…6224 |
| HYPE Passport | Records Passports that the Passport service signs. | 0x0Eb4…7290 |
| Swap helper | Testnet only: lets the site buy PNTH from its Ascend pool. | 0x31A6…1500 |
| PNTH drip | Testnet only: 100 free PNTH once per wallet, for when the pool is sold out (the first drip, 0x49C7…8624, gave out all 10M). | 0x1c68…7176 |
The basket vault only buys within 5% of Ascend’s own average price, keeps each buy small, and skips a coin for a run after a big price move.
Questions
Has it been audited?
Not yet. It runs on testnet, and an audit comes before mainnet. Until then our contracts are verified on the explorer, every note from Slither (the standard automatic checker) is answered in our code repository, and the code goes public on GitHub before launch.
Who holds the keys?
We do, for now. The curator proposes basket lists. The guardian, a separate key, can veto a list or switch Passports off. We’d like Ascend to hold the guardian on mainnet. The Passport service signs Passports. None of these keys can move anyone’s funds.
What could go wrong?
A coin in the basket can lose value. Someone could try to push a price before the vault buys, which is why it only buys near Ascend’s average and keeps buys small. Passport tiers depend on our service reading Hyperliquid correctly.
Found a problem?
Message @pantheonindex on X and we’ll take it private. We’ve already reported one issue in Ascend itself to their team.