Protocol

Trust and audits

Audits

Gully Core is built on PancakeSwap Infinity's audited core.

Gully's own additions (the launch kit, the fee controller, the pad factory, the utilities, orders, vaults and the rest) have no external audit. Do not read the line above as an audit of them.

Verified source

Every deployed contract is verified on our own Sourcify at verify.gullychain.xyz. See Contracts for each address and its status. A deploy ends with a verification check that fails the run if a contract is not verified on Sourcify.

Who can change what

Governance on each chain is a Safe multisig. On Anubis it is a 2-of-3 Safe, and the deployer holds no role. Fees can be lowered at once and raised only after a public notice, under an immutable cap. See Fees.

Licence

The contracts are GPL-2.0-or-later. The SDK, CLI and widgets are MIT and written independently, so building against Gully Core does not mean importing GPL code. The upstream credit is kept in the repository.