Audit
All onchain code for dUSD has been audited by independent security firms, including Halborn and Quill Audits.
Halborn halborn.com/audits/deploy-finance/dusd-and-sdusd-6e4b78
Scope
The Halborn and Quill reviews cover Deploy Finance's dUSD and sdUSD smart contracts. They do not represent an audit of every vendor, service, or integration used by Deploy Finance.
Agent wallets use Privy's embedded-wallet infrastructure and they are self-custodial: users retain ownership and can export their keys, while agents receive scoped, revocable session keys that cannot transfer or withdraw funds.
Wallets sit outside the dUSD/sdUSD contract and use a separate set of security controls: Deploy Finance does not operate a pooled custody contract for agent deposits.