Skip to content
Admiral Canada
FRLog in

Smart Contract & Protocol Risk

Code fails. Cover for when it does.

Audited code is not unbreakable code. Oracle manipulation, re-entrancy, bridge validator compromise and malicious governance proposals have all drained protocols that passed review. This cover addresses loss of funds deposited in, or held by, scheduled smart contracts.

Maximum available limit CAD 25 million, subject to underwriting

What the cover addresses

Exploit loss

Funds drained by an attacker exploiting a code vulnerability in a scheduled contract.

Oracle failure

Loss caused by manipulated or failed price feeds feeding a scheduled protocol.

Bridge failure

Loss of assets in transit across a scheduled bridge after validator or contract compromise.

Governance attack

Loss from a malicious proposal passed through flash-loan voting or a similar attack.

Conditions underwriters expect

  • Independent audit of every scheduled contract
  • Timelock on upgrades
  • Bug bounty programme
  • Incident-response runbook

Not covered

  • Contracts without an independent audit
  • Losses from token-design or incentive failure without an exploit
  • Insider rug pulls and exit scams
  • Upgrades deployed outside the documented process

Other coverage