> ## Documentation Index
> Fetch the complete documentation index at: https://zyfai.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Transparency & Audits

This section consolidates Zyfai's commitment to security and risk transparency. It serves as the central reference for external audits, formal verifications, and the tools we provide for institutional risk assessment.

### Risk Assesment

To empower informed decision-making, Zyfai provides an institutional-grade risk dashboard developed by our quantitative team.

<Info title="🔍 Explore more...">
  * [Risk Dashboard](/docs/product/intelligence/risk)
</Info>

## Audits & Formal Verification

Zyfai's security is validated by industry-leading experts:

* **End-to-End Audit:** The integrated [Security Proxy System](/docs/product/control/proxy) and full stack have been audited end-to-end by [Sherlock](https://sherlock.xyz/), with no outstanding security issues identified.
* **Modular Audits:** Core smart contracts, including Safe modules and registry contracts, undergo regular audits by top firms.

### End-to-End Protocol Audit

The backend that handles all rebalancing between your DeFi positions, the executor module and the target registry has been [audited by Sherlock](https://x.com/Zyfai_/status/2004230423099195477?s=20) in December 2025.

| Name                                         | Audit Report                                                           |
| -------------------------------------------- | ---------------------------------------------------------------------- |
| NestJs Backend & Session Key Smart Contracts | [Report - 20.12.2025](https://zyf.ai/sherlock-audit-november-2025.pdf) |

### Agent Vault

All Agent Vault smart contracts were [audited by Sherlock](https://zyf.ai/zyfai_erc7540_sherlock.pdf) and [Cecuro](https://x.com/Zyfai_/status/2042241739373842905?s=20) in March 2026.

| Name                        | Audit Report                                                     |
| --------------------------- | ---------------------------------------------------------------- |
| Agent Vault Smart Contracts | [Report - 04.03.2025](https://zyf.ai/zyfai_erc7540_sherlock.pdf) |
| Agent Vault Smart Contracts | [Report - 03.03.2025](https://zyf.ai/zyfai_audit_cecuro.pdf)     |

### Smart Account

Regarding smart account deployment, Zyfai Smart Accounts product are build using [Rhinestone](https://www.rhinestone.wtf/), leveraging SmartSession, Safe7579 and Core modules.

| Name          | Audit Report                                                                                                                             | Contract Repository                                         |
| ------------- | ---------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------- |
| Smart Session | [Report - 25.12.2024](https://github.com/erc7579/smartsessions/blob/main/audits/rhinestone_smartsessions_update.pdf)                     | [Repository](https://github.com/erc7579/smartsessions)      |
| Safe7579      | [Report - 5.07.2024](https://github.com/rhinestonewtf/safe7579/blob/main/audits/ackee-blockchain-rhinestone-safe7579-report.pdf)         | [Repository](https://github.com/rhinestonewtf/safe7579)     |
| Core modules  | [Report - 3.10.2024](https://github.com/rhinestonewtf/core-modules/blob/main/audits/ackee-blockchain-rhinestone-core-modules-report.pdf) | [Repository](https://github.com/rhinestonewtf/core-modules) |

All Rhinestone audits are stored [here](https://docs.rhinestone.dev/home/resources/audit-reports).

<Info title="🔍 Explore more...">
  * [Safe7579](/docs/product/infra/safe7579)
  * [Session Keys](/docs/product/control/session-keys)
</Info>

### Paymaster

Under the hood, to ensure you enjoy the best gasless experiences, we utilize the [Pimlico paymaster](https://github.com/pimlicolabs/erc20-paymaster) for specific transactions. This facilitates gasless transactions for any on-chain actions associated with Smart Accounts, including Deposits, Withdrawals, Swaps, etc.

| Name                    | Audit Report                                                                                                    |   |
| ----------------------- | --------------------------------------------------------------------------------------------------------------- | - |
| Pimlico ERC20 Paymaster | [Report - 28.03.2024](https://github.com/pimlicolabs/erc20-paymaster/blob/main/audits/2024-03-openzeppelin.pdf) |   |

<Info title="🔍 Explore more...">
  * [Paymaster](/docs/product/infra/paymaster)
</Info>

### rZFI

rZFI is the reward token contract used to incentivize users to deposit into the Zyfai protocol and create their own agents. It is a fork of the [`evk-periphery`](https://github.com/euler-xyz/evk-periphery/tree/master) repository from Euler Finance, which has been in use since [this](https://vote.zyf.ai/#/proposal/0x2dab5c4ceab4bd19cf6c3b1cdf44d99044d85a6d4050ff8b9b4957d0f91b2221) governance proposal.

| Name | Audit Report                                                    |
| ---- | --------------------------------------------------------------- |
| rZFI | [Report - 06.07.2025](https://www.zyf.ai/rzfi-audit-report.pdf) |

<Info title="🔍 Explore more...">
  * [rZFI Incentives](/docs/product/ecosystem/token/incentives)
</Info>