How it works
Auditors analyze source code, test assumptions and report findings. The quality and scope vary, and the deployed contract may later change through upgrades.
What to check
Check the audit date, exact commit or contract version, unresolved findings and whether the audited code matches what is live.
- Match audit to deployed version
- Read unresolved findings
- Check upgradeability after audit
Limits and risks
An audit reduces uncertainty but cannot prove that software is bug-free. Economic design, admin keys, oracles and user behavior can create risks outside the audited code.
Primary sources
Bitcoin Developer Reference↗Ethereum developer documentation↗FATF: Virtual Assets↗General information only. Investment products can lose value, and terms, fees and regulation can change.