SECURITY
Architecture
Contract list and one-line role for each piece.
| Contract | Role |
|---|---|
| BoxEngine | Creates boxes, executes mint/redeem/claim logic, tracks fees and caps. |
| BoxToken | ERC-20 token representing a claim on a specific box basket. |
| BoxVault | Dedicated custody contract that holds the underlying stocks for one box. |
| BENTO (external) | Fixed-supply ERC-20 launched on pons.family; used by the fee buyback-and-burn path. Not deployed or controlled by Bento Protocol. |
| FeeCollector | Receives protocol fees and executes BENTO buyback-and-burn operations. |
| BoxRegistry | Maps box identifiers to engine versions for discovery and versioning. |
| UniswapV4Adapter | Adapter used for configured Uniswap V4 stock routes. |
| SyntheticBox | Standalone ETH-collateralized vault that is itself the ERC-20 share token for one synthetic box. |
| BoxFactory | Deploys synthetic boxes; owned by the timelock. |