Security & Audits

Trust, but verify.

Real estate is real money. Every layer of Dueño — contracts, reserves, custody — is built to be independently verifiable.

Dual smart-contract audits

Every contract is independently audited by two firms before mainnet. Reports are published in full.

Continuous proof-of-reserve

On-chain attestations continuously prove each SPV holds the property backing its rhTokens.

Regulated custody

Property title, insurance and cash are handled by regulated custodians in bankruptcy-remote SPVs.

Self-custody by default

You hold your rhTokens. Dueño never takes custody of your assets or private keys.

Bug bounty

Up to $250,000 for critical disclosures via our responsible-disclosure program.

Real-time monitoring

Transaction monitoring and anomaly detection across every SPV and contract, 24/7.

Audit history

Trail of Bits

Core rhToken & distribution contracts

Jun 2026 Passed

OpenZeppelin

RETF index & governance

Jun 2026 Passed

Chainalysis

AML / compliance rails

May 2026 Passed
Found a vulnerability? Email security@dueno.capital. Please practice responsible disclosure — do not exploit or publicize issues before we've resolved them.