> For the complete documentation index, see [llms.txt](https://docs.zestprotocol.com/start/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.zestprotocol.com/start/stacks-vaults-smart-contracts/zvstbtc-audits.md).

# zvstBTC Audits

Security is central to how the zvstBTC Vault is built. This page collects the security review that covers the vault.

## Security Approach

The vault is designed conservatively and layered with protections: fund custody is isolated in a permanent contract, the operator can only move funds along a fixed strategy path, the leveraged position is always kept over-collateralized, a guardian can pause activity instantly, sensitive changes are timelocked, and external deposits are capped and scaled up gradually. These are described in more detail on the [Architecture](/start/stacks-vaults/zvstbtc-vault/architecture.md) page.

## Audit

The zvstBTC Strategy Vault was audited by [Clarity Alliance](https://clarityalliance.org/), a Clarity smart-contract security firm.

| Auditor                                          | Scope                  | Report                                                                                                                       |
| ------------------------------------------------ | ---------------------- | ---------------------------------------------------------------------------------------------------------------------------- |
| [Clarity Alliance](https://clarityalliance.org/) | zvstBTC Strategy Vault | [Read the report](https://clarity-alliance.github.io/audits/Clarity%20Alliance%20-%20Zest%20Protocol%20Strategy%20Vault.pdf) |

## Responsible Disclosure

If you believe you have found a security issue in the zvstBTC Vault or any Zest Protocol contract, please report it responsibly through [Immunefi](https://immunefi.com/bug-bounty/zest-protocol-v2/information/) or Zest Protocol's official channels rather than disclosing it publicly.

## See Also

* [Architecture](/start/stacks-vaults/zvstbtc-vault/architecture.md): the vault's security design
* [zvstBTC Contracts](/start/stacks-vaults-smart-contracts/zvstbtc-contracts.md): the deployed contracts
* [zvstBTC Error Codes](/start/stacks-vaults-smart-contracts/zvstbtc-error-codes.md): failure code reference