<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://tracefi.co/</loc>
</url>
<url>
<loc>https://tracefi.co/about</loc>
</url>
<url>
<loc>https://tracefi.co/contact</loc>
</url>
<url>
<loc>https://tracefi.co/incidents</loc>
</url>
<url>
<loc>https://tracefi.co/leaderboard</loc>
</url>
<url>
<loc>https://tracefi.co/methodology</loc>
</url>
<url>
<loc>https://tracefi.co/paths</loc>
</url>
<url>
<loc>https://tracefi.co/patterns</loc>
</url>
<url>
<loc>https://tracefi.co/privacy</loc>
</url>
<url>
<loc>https://tracefi.co/security</loc>
</url>
<url>
<loc>https://tracefi.co/terms</loc>
</url>
<url>
<loc>https://tracefi.co/paths/vaults</loc>
</url>
<url>
<loc>https://tracefi.co/paths/vaults/vault-fundamentals</loc>
</url>
<url>
<loc>https://tracefi.co/paths/vaults/vault-fundamentals/learn</loc>
<lastmod>2026-07-17T15:46:59.544Z</lastmod>
</url>
<url>
<loc>https://tracefi.co/paths/vaults/vault-fundamentals/lab/simple-vault-deposit-withdrawal</loc>
<lastmod>2026-07-17T16:29:03.281Z</lastmod>
</url>
<url>
<loc>https://tracefi.co/incidents/cross-domain-message-validation-gap</loc>
<lastmod>2026-06-15T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://tracefi.co/incidents/oracle-observation-window-skew</loc>
<lastmod>2026-06-22T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://tracefi.co/incidents/signer-credential-custody-break</loc>
<lastmod>2026-06-10T00:00:00.000Z</lastmod>
</url>
<url>
<loc>https://tracefi.co/incidents/vault-share-accounting-drift</loc>
<lastmod>2026-07-01T00:00:00.000Z</lastmod>
</url>
</urlset>
