# Audits (/docs/risex/contracts/audits)

The RISEx smart contracts have been reviewed by independent security firms. The full reports are linked below.

| Scope                    | Auditor | Report                                                                                |
| ------------------------ | ------- | ------------------------------------------------------------------------------------- |
| RISEx exchange contracts | Cantina | [View report](https://drive.google.com/file/d/1FfzeGmh_iyzQ9B-Lg1L2GGjAVD3ULd3j/view) |
| XLP Vault                | yAudit  | [View report](https://drive.google.com/file/d/1hfppdkxBYTiXbfinJ2fP70Z6iQKf-HEd/view) |

## RISEx exchange contracts (Cantina)

Cantina reviewed the core RISEx contracts from February 17 to March 10, 2026. The review covered the perps engine (margin, liquidations, ADL, and funding), spot markets, the order book and matching engine, fees and builder codes, oracles, the router, and access control.

| Severity      | Found  | Fixed  | Acknowledged |
| ------------- | ------ | ------ | ------------ |
| Critical      | 0      | 0      | 0            |
| High          | 4      | 4      | 0            |
| Medium        | 11     | 11     | 0            |
| Low           | 20     | 17     | 3            |
| Informational | 32     | 25     | 7            |
| **Total**     | **67** | **57** | **10**       |

No critical issues were found, and all high and medium findings were fixed. Cantina then reviewed the fixes and concluded that all findings were addressed, with no new vulnerabilities identified in the fixes.

## XLP Vault (yAudit)

The XLP Vault was audited separately by yAudit. See [XLP Vault](/docs/risex/xlpvault/about) for how the vault works.