Security
Nordstern's security model is enforced entirely on-chain by the Guard Contract — no trusted intermediary, no off-chain settlement.
Every guarantee below is enforced in the contract code, not by off-chain policy — verifiable on any supported chain.
On-chain guarantees
Minimum output enforced on-chain
The Guard Contract checks that the output amount ≥ minOutput (derived from the slippage parameter) before releasing any funds. If the check fails for any reason (slippage, MEV, or a routing bug), the transaction reverts and nothing moves.
Input and output always clear in the same transaction
The Guard receives the input tokens and releases the output tokens atomically. There is no state where funds sit in the contract between blocks. Every swap either completes fully or reverts entirely.
Executor cannot steal funds
The Executor Contract performs routing but never controls fund release. That is always the Guard's responsibility. Even if an Executor implementation had a bug or was replaced with a malicious one, the Guard's output check prevents loss.
Single approval target
Users approve only the Guard Contract (tx.to in the swap response) to spend their input token.
Third-party DEX contracts are called by the Executor, not by the user's wallet. No additional
approvals required.
Verifying contracts
Every deployment is listed on the Contracts page. When verifying a swap, confirm that
tx.to in the API response matches the Guard Contract for your chain. Any swap targeting a
different address is not routed through Nordstern.
Responsible disclosure
If you discover a security vulnerability in the contracts or API, please report it privately before public disclosure.
Contact on Telegram