Is BULK Exchange Audited? Security, the Multisig, and the Insurance Fund
The BULK Program was audited by Zellic, confirmed complete August 17, 2026, ahead of the September 5, 2026 mainnet launch. Here is the full security picture: the audit, the 5-of-8 multisig, the insurance fund, and what risk remains.
TL;DR
The BULK Program was audited by Zellic, confirmed complete August 17, 2026, ahead of the September 5, 2026 mainnet launch. Upgrade and admin authority run through Squads multisigs requiring 5-of-8 approvals (upgraded from 3-of-5 on August 18, 2026) with a 3-hour timelock, signed from air-gapped Ledger hardware — no single key controls upgrades. BULK also uses FROST threshold signatures for withdrawals (validator supermajority required), non-custodial settlement, and a live insurance fund. Smart contract risk still exists — no protocol is immune, audit or not.
BULK Exchange mainnet launched September 5, 2026, backed by a third-party audit and a hardened multisig setup. Here is the full, current security picture — what’s been reviewed, who controls upgrades, and what risk remains regardless.
The Audit
The BULK Program was audited by Zellic, with completion confirmed August 17, 2026 — roughly three weeks before mainnet launch. This closes the gap that existed during the pre-deposit period, when no published third-party audit existed and BULK carried standard pre-audit protocol risk.
What an audit does: Independent security researchers review the program logic for exploitable bugs before real capital is at risk at scale.
What it doesn’t do: Eliminate risk entirely. Audited protocols have still been exploited elsewhere in DeFi — an audit lowers the probability of a catastrophic bug, it doesn’t guarantee zero bugs.
The Multisig and Key Custody
BULK Admin and BULK Authority run as two separate Squads multisigs. On August 18, 2026, both were upgraded to add signers and rotate a key, bringing quorum to 5-of-8 (up from 3-of-5).
Authority model:
- Program upgrade authority: Squads multisig, 5-of-8 approval required
- Program admin authority: separate Squads multisig, 5-of-8 approval required
- Sensitive multisig actions: protected by a 3-hour timelock
Key custody: Signing keys are held on Ledger hardware wallets. Those Ledgers connect only to air-gapped computers used solely for signing — protected by XDR/EDR controls, never used as general-purpose workstations. This is designed to reduce exposure to hot-wallet compromise, browser-wallet compromise, and everyday workstation malware.
Upgrade process, in order:
- Review and approve the exact code diff
- Build and verify the deploy artifact
- Execute the upgrade only after the 5-of-8 threshold is reached
- Wait out the 3-hour timelock
- Confirm the deployed program matches the intended artifact
- No single externally owned account ever controls the upgrade authority
The Exchange Architecture: Security Design
Non-Custodial Settlement
BULK Exchange settles on Solana. Trades execute on the BULK Net L0 layer, but settlement goes to the Solana base chain. Users maintain non-custodial security even while trading — margin is not held by the exchange in a centralized wallet.
BULKBFT Leaderless Consensus
No single validator controls transaction ordering. The matching engine requires >2/3 validator consensus for every batch. A single compromised validator cannot front-run trades, double-spend, or censor transactions. See BULKBFT Explained for the full technical breakdown.
Insurance Fund (Live)
The mainnet insurance fund:
- Absorbs shortfalls when liquidations close worse than the liquidation price
- Eliminates liquidation fees — traders pay nothing extra at liquidation
- Prevents auto-deleveraging (ADL) in normal market conditions
The insurance fund is funded by a portion of exchange revenue and is now live, since mainnet trading generates the revenue that funds it.
Auto-Deleveraging (Last Resort)
If the insurance fund is exhausted (documented as “an exceptionally rare event”), ADL reduces the positions of the most profitable leveraged traders. On BULK, ADL ranking = PnL × leverage, so the most levered profitable traders are reduced first. BULK’s risk engine explicitly distinguishes liquidation events, ADL shortfall, and ADL underfill as separate categories — see ADL on BULK Exchange.
Risk Engine Notes (Live)
Trading and risk interfaces should treat BULK’s published maintenance-margin values as authoritative rather than reconstructing liquidation eligibility from mark-price equity alone — maintenance margin varies with position size, book depth, cascade risk, and market regime. BULK shipped liquidation smoothing (partial liquidations evaluated by book depth) on September 4, 2026, reducing forced liquidations in thin books.
Risk Tiers for BULK Exchange (Mainnet)
| Risk | Applies To | Mitigation |
|---|---|---|
| Smart contract bug | All traders | Zellic audit (Aug 17, 2026); 5-of-8 multisig, 3-hour timelock |
| Upgrade key compromise | All traders | 5-of-8 quorum, air-gapped Ledger signing, XDR/EDR-protected machines |
| Exchange hack | All traders | Non-custodial settlement, BULKBFT consensus |
| Oracle manipulation | All traders | Deterministic CLOB; mark price from spot index median |
| Insurance fund depletion + ADL | Leveraged traders | ADL is documented and rare; insurance fund absorbs shortfalls first |
| BULK token underperforms at TGE | AURA holders | Not a protocol security risk — a market/valuation risk |
Practical Security Checklist
Before trading, verify:
You are on the correct URL. BULK mainnet trading is at
app.bulk.trade. Phishing sites may mimic the interface. Bookmark the real URL and go directly.Your wallet is not connected to unknown sites. Revoke unnecessary approvals via Revoke.cash or a similar tool.
You can withdraw. Test a small withdrawal before committing your full intended margin.
Trade now on mainnet → app.bulk.trade
Sources & Further Verification
- BULK architecture documentation — BULKBFT, multisig, insurance fund, and ADL specs referenced in this article
- @bulktrade on X — official protocol updates and security disclosures, including the Aug 17 audit confirmation and Aug 18 multisig upgrade
- BULK on DefiLlama — independent third-party TVL tracking
- BULK Discord — official announcement channel for security and risk-engine updates
Also See
- Is BULK Exchange Legit? — the legitimacy question, with on-chain data
- Who Is Behind BULK Exchange? — team, communication channels, protocol history
- BULK Exchange Architecture — the full technical specification
- BULK Liquidations — how the insurance fund and ADL work on mainnet
Back to cluster hub: BULK Season 1 AURA Guide
Independent research, not financial advice. Security status last checked September 5, 2026.
0 bps maker fees end ~October 5, 2026.
BULK's Genesis Phase waives maker fees for the first 30 days of mainnet. Trading is invite-only — a free access code plus a referral link gets you in.
Browse all topics
Every cluster on BuiltOnBulk. Jump to the hub for a deeper read.
