Risk
How to read a smart-contract audit
An audit is a dated review, not a safety certificate.
- 01Scope
- 02Date
- 03Findings
- 04What changed after
A dated review
An audit is a report by a named firm, on a named commit, on a named date. It is not a safety certificate and it does not cover the strategy, the oracle, the admin’s later actions or code shipped after the report.
Read the scope first
If the report excludes the strategy, the governance module or an external dependency, those exclusions are the interesting part. Unresolved high findings matter more than the existence of a PDF.
This demo
Illustrative vaults here do not link to live audit reports. ‘Illustrative audit reference’ means the field exists in the schema. It does not mean a firm has reviewed a contract.
Digital assets and DeFi protocols are high risk. You may lose some or all of the assets you deploy. AltVaults DeFi provides software, data and informational tools. It does not provide investment advice, recommendations, brokerage, custody, fund management or guaranteed returns.