> For the complete documentation index, see [llms.txt](https://docs.elara.fi/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.elara.fi/risk-and-security/audit.md).

# Audit Status

Elara's core contracts have completed a security audit through Sherlock. The scope covered all core contracts: Vault, ElUSD, sElUSD, ElUSDStake, PriceOracle, TreasuryAdapter, and TokenRegistry. Full contract architecture is available in the [Protocol Reference](https://docs.elara.fi/protocol-reference).

The full audit engagement and findings are available on the [Sherlock audit dashboard](https://audits.sherlock.xyz/dashboard/c-891ecd3c54be1b6f76434a4001ce1ee8).

{% file src="/files/S0HR57FAMqOlvtraUG8X" %}

| Phase              | Status     |
| ------------------ | ---------- |
| Internal review    | Complete ✓ |
| Code freeze        | Complete ✓ |
| Audit engagement   | Complete ✓ |
| Report publication | Complete ✓ |

**Bug bounty and coverage**

There is no active bug bounty programme, and no live post-audit coverage amount is currently in place. Both are proportionate decisions for a protocol at this stage rather than oversights, and we would expect to revisit them as the protocol grows.

{% hint style="warning" %}
The audit report is available for review. While a completed audit significantly reduces smart contract risk, no audit eliminates all risk. Users should review the report and assess their own risk tolerance.
{% endhint %}