Standard
Smart-Contract and Oracle Risk Standard
This standard sets the crypto-domain governance requirements for deploying, upgrading, relying on, and integrating smart contracts and the oracles and external data feeds they depend on. It is a requirements overlay under the Crypto-Asset Governance Framework. It governs the domain-specific decisions that surround a smart contract, the decision to deploy or rely on one, how its upgrade and change are authorized, and how its oracle and network dependencies are managed, and it does not restate code-level secure development, which the Secure Development and Engineering Policy and its companion developer-security documents own, nor the threat-modelling method, which the Threat Modelling Standard owns.
- Type
- Standard
- Version
- 0.0.3
- Date
- 2026-09-29
- Owner
- Crypto-Asset Governance Approver
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Crypto-Asset Governance
- Review frequency
- 6 to 12 months and upon material contract, platform, oracle, or regulatory change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- 1. Purpose
- 2. Applicability
- 3. Requirements
- 4. Evidence requirements
- 5. Limitations
Related documents
- crypto/
README.md (opens in a new tab) source - Crypto-Asset Governance Frameworkcrypto
- Crypto-Asset Domain Inventory Registercrypto
- Crypto-Asset Service Provider Vetting Standardcrypto
- Digital Asset Custody Standardcrypto
- Third-Party and Supply Chain Risk Standardrisk
- Secure Development and Engineering Policydev-security
- Threat Modelling Standardsecurity
Next
All Documents