# Security

***

## **Security Overview**

Omnes’ highest priority is the protection of investor capital and the integrity of our hashrate-backed products. The Omnes Mining Note and all Omnes hashrate contracts are designed with security, reliability, and compliance at their core. We work with world-class infrastructure partners, custodians, and auditors, and we maintain rigorous internal controls to minimize operational risk.

The Bitcoin that backs OMN is secured with qualified custody, and Omnes maintains multiple, redundant records of investor ownership — including our internal ledger, custodian records, and on-chain registry for tokenized interests. In the rare event that an investor’s account or wallet address is compromised, Omnes has procedures in place to verify ownership and restore positions.

Every core component of the Omnes platform is audited and penetration-tested annually, with safeguards in place to protect both investor assets and data.

***

### **Note Custody**

| Product                 | Custodian       |
| ----------------------- | --------------- |
| Omnes Mining Note (OMN) | To be announced |

* **A qualified custodian** serves as Omnes’ primary custodian, providing bank-grade MPC security, insurance coverage, and SOC 2 Type II attestation.
* Bitcoin is held in segregated custody accounts, with Omnes never taking possession of investor funds directly.
* For investors purchasing OMN in USDC or USD, cash is briefly custodied by a **regulated banking partner** before settlement.

***

### **Private Endpoint Hashrate Routing**

Omnes sources hashrate exclusively from institutional-grade data centers using proprietary private routing endpoint. This prevents malicious interception, spoofing, or front-running of client hashrate and ensures consistency of payout reporting.

***

### **Key Management & Access Control**

* Private key management for internal wallets is facilitated through a secure MPC architecture, with multi-party approvals for all transactions.
* Role-based access controls and mandatory multi-factor authentication are enforced for all Omnes systems.
* Real-time monitoring alerts us to anomalous transactions or access attempts.

***

### **Audits & Assurance**

* Annual third-party audits of financial statements and custody records
* Penetration tests performed annually by independent security firms
* Continuous monitoring of critical systems for uptime, routing health, and pool connectivity

***

### **Bug Bounty Program**

Omnes actively encourages the security research community to seek bugs in any of our operations. Responsible disclosure of vulnerabilities helps us strengthen the entire ecosystem.

#### **Rewards**

We offer meaningful rewards for unique, responsibly disclosed vulnerabilities that could lead to:

* Interruption or manipulation of hashrate delivery
* Material harm to Omnes customers or systems

Rewards depend on severity and exploitability.

#### **Disclosure Process**

Submit reports to [**security@omnes.io**](mailto:security@omnes.io) with clear steps to reproduce the issue (written or video format preferred). Omnes will acknowledge receipt within 3 business days and work closely with researchers to resolve validated issues. Disclosures are confidential and handled without penalty.

***
