Matrixdock Gold (XAUm)
The-RWA-Reserve-Layer
Critical / High
Medium
Low / Informative
Report files
Audit lifecycle
This engagement is complete with finalized deliverables.
Completed
Scheduled
Scope, timeline, and review plan were agreed.
Completed
In Progress
Manual review and verification work were carried out.
Completed
Completed
The engagement wrapped with a published final report.
Executive Summary
High-level assessment and conclusions
A concise overview of the audit scope, core findings, and the key outcomes from the engagement.
Matrixdock engaged Runtime Verification Inc. to conduct a 2-week security audit of the Matrixdock Gold (XAUm) protocol and code, followed by 1 week of remediation support, beginning June 8, 2026. The audit aimed to evaluate protocol correctness and security, assess existing quality assurance measures, identify vulnerabilities, and provide recommendations across code, testing, and documentation.
The primary focus was validating the role-based system governing the XAUm token contract, with secondary attention on the BullionMinter contract and its interaction with XAUm. Each role carries specific capabilities, and ensuring that actor permissions are correctly bounded is critical to the protocol's proper functioning.
Runtime Verification's process began with a design review of the protocol's role structure and contract architecture, examining documentation and the existing codebase to identify gaps in the permission model and recommend improvements. This informed a manual code review comparing implemented role capabilities against the intended design and security best practices. The engagement concluded with a one-week remediation period, during which Runtime Verification collaborated with the Matrixdock team to address identified issues and verify proposed fixes.
Reports
Download the audit artifacts
Access the published PDF deliverables associated with this engagement.
PDF report 1
Matrixdock RWA Audit.pdf
Download the published report for this engagement.