[#499] Commission external security audit from a Stellar ecosystem security firm before mainnet launch

[AdaBebe0]

Backlog reference: #499 · security

Summary

Commission external security audit from a Stellar ecosystem security firm before mainnet launch

Context

The final go/no-go checklist before real money moves on Stellar mainnet: observability, an external security audit, and the mainnet cutover itself.

The path to a public, mainnet launch: KYC/compliance groundwork, price/localization/mobile polish, performance hardening, documentation, and the final production go-live checklist.

Acceptance Criteria

• Commission external security audit from a Stellar ecosystem security firm before mainnet launch — implemented as described above.
• The change is verified against the specific threat or weakness named in the title, not just "looks more secure."
• No existing functionality regresses as a side effect of the hardening.

Definition of Done

• Implemented on a branch and opened as a PR referencing this issue (Closes #499 won't auto-link since this is a repo-internal reference — mention the issue number GitHub assigned instead).
• CI is green (lint, typecheck, tests, build).
• Reviewed against CONTRIBUTING.md conventions (Conventional Commits, code style).
• CHANGELOG.md updated under [Unreleased] if the change is user- or API-visible.
• Merged to main.

---

Generated from the CoopLumen backlog (issue.md). See CONTRIBUTING.md for the contribution workflow.