Audits, security, and the policies behind every BV DeFi product.
One canonical home for diligence questions. Every audit report, every security policy, every regulatory disclosure. If you're evaluating BV DeFi for institutional capital, start here.
Smart-contract audits
| Product | Scope | Firm | Status |
|---|---|---|---|
| TMB / mortgage-system | Tokenized Mortgage Bond suite (1,001 tests) | OpenZeppelin | in-progress |
| MXTK | Token contracts + bridge | OpenZeppelin | completed |
| MXD Vault | Stablecoin vault + collateral logic | Slither static analysis | completed |
| BV Energy / XCT | Production credit tokens + price feeder | Internal review | completed |
| BV Authorized Agents | EIP-7702 + proxy fallback (27 tests) | Scheduled — external auditor | scheduled |
Security + governance policies
Security posture
Multi-sig governance, key-management process, on-call rotation, and the security guide we hand to every new operator.
Incident response runbook
What we do when something breaks. Severity ladder, pause-procedure per contract, public-comms protocol.
Reg S compliance (today); Reg D 506(c) post-CLARITY-Act
Non-US-Person accreditation verification, OFAC screening, geolocation gating. US Reg D 506(c) channel opens once the CLARITY Act passes and the operator entity migrates onshore.
Deployment + governance
CREATE2 single-broadcast orchestrator, multi-policy governance (audit, verifier ops, ZK setup, oracle, OFAC) — six policy docs.
Tax-credit treatment
ASC 740 / IFRS guidance notes for institutional accountants evaluating XCT positions on the balance sheet. Tax counsel reviewed.
Bug bounty
Coming Q2 2026. Until then, security disclosures via security@mxtktoken.com — PGP key in repo.
Regulatory + disclosure language
Nothing on this site constitutes an offer to sell or a solicitation of an offer to buy securities. The DeFi pillar is operated from Panama; tranche offerings (Senior, Mezzanine, Junior for any TMB pool) and OTC trades arranged through the site are restricted today to non-U.S. professional / accredited investors under Regulation S. A U.S. onshore channel under Rule 506(c) of Regulation D opens once the CLARITY Act (FIT21) or equivalent U.S. market-structure legislation is enacted and we have migrated the operator entity onshore. Full text on the Disclosures page.
Tax-credit transactions are subject to IRS portal-filing obligations under §6418 (transferability) and §6417 (direct pay). All XCT minting + transfers are accompanied by on-chain transfer-election metadata. Buyers must be independently advised on tax treatment.
For accountants:ASC 740 / IFRS treatment notes for XCT positions(in development).
Diligence questions?
We maintain a per-product data room for accredited investors and originators. Audit reports, contract addresses, term sheets — everything you'd reasonably ask for.