Who can touch your money.

Not audited yet. Here is exactly who can do what.

The rules the program enforces

Who can do what

WhoCanCannot
YouDeposit, withdraw, borrow, trade, repay and close your own trades, from your own walletTouch anyone else’s deposit or trade
The Dormo programHold the pool’s USDG and move it only by the rules aboveMove funds outside those rules
Admin wallet (Dormo)List new stocks and markets; hand the admin role to another walletMove deposits, change loans, close or edit your trades, change fees or rates
Upgrade authority (the deploy wallet)Upgrade the program’s code, or close it once the pool is emptyAct without leaving a public record on Solana
Paxos (USDG issuer)Freeze or move USDG, including the pool’s, through USDG’s permanent delegateChange the Dormo program
xStocks issuerPause, freeze or move its own tokensTouch your USDG
Raydium / Orca poolsSet the prices the program readsMove any funds

Safety questions

Is it audited? Not yet. The program has a full test suite, including a random walk that checks the books after every step and a run against the real USDG token, but it has not been reviewed by an outside auditor. Start small.

Can anyone pause it? No. Dormo has no pause switch. The admin can’t stop withdrawals, repayments or closing a trade.

Who sets the prices? The xStock/USDC pools on Raydium and Orca, read directly by the program in the same transaction.

Which wallets work? Phantom, Solflare, Backpack and other Solana wallets.

Found a bug? Write to hello@dormo.family. Our security.txt has the details.