> For the complete documentation index, see [llms.txt](https://docs.aqua.network/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.aqua.network/security/audits.md).

# Audits

Security audits of Aquarius smart contracts and notable bug bounty fixes

## Audits

### Aquarius AMM audit by CoinFabrik - March 2024

The Aquarius Foundation engaged CoinFabrik to conduct an audit of Aquarius smart contracts in January 2024, which was completed in April 2024. The Aquarius team reviewed and addressed all feedback provided during the audit process.

{% file src="/files/O3LXU55MeM4fCiqdctzB" %}

### Aquarius AMM audit by Certora - December 2024

The Aquarius Foundation engaged Certora to conduct a new audit of Aquarius smart contracts in June 2024, which was completed in December 2024. The Aquarius team reviewed and addressed all feedback provided during the audit process.

{% file src="/files/4H2fsEXFPFWV2pkXG4dz" %}

### Competitive Aquarius AMM audit by Cantina - May-June 2025

Cantina coordinated 33 independent researchers to [audit](https://cantina.xyz/portfolio/81e6d203-8a65-49a0-b581-a5fe2b5c0a13) Aquarius smart contracts. The competitive audit lasted for 2 months. All the identified high-risk issues, as well as the most of the medium-risk ones were fixed by Aquarius team.

{% file src="/files/9KXWbk1PERbjlQwFeKPJ" %}

### Aquarius AMM audit by Halborn — June–August 2026

Halborn completed a security assessment of Aquarius’s Soroban AMM smart contracts, including concentrated liquidity pools, the router, and reward components. No critical or high-severity findings were reported. Of the 36 findings, 21 were resolved, seven were accepted as risks, and eight informational findings were acknowledged.

## Bug bounty fixes

### Potential duplication of LP rewards - September 2024

{% file src="/files/IlR20fpyFFMnXdPOtic0" %}