> For the complete documentation index, see [llms.txt](https://docs.fwx.finance/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.fwx.finance/development/security-and-audits.md).

# Security and Audits

FWX has a full smart contract audited by [Valix](https://valix.io/), [InspeX](https://inspex.co/), and [Peckshield](https://peckshield.com/).

#### Audit Reports

{% embed url="<https://github.com/forward-x/audit-report>" %}

FWX Price Feeds is powered by [Pyth Network](https://pyth.network/)

### Security Comes First

Many DeFi platforms rely on smart contract auditors, yet they remain vulnerable to zero-day attacks. This is because the DeFi sector operates within the financial domain, where technical development and audits alone are insufficient. DeFi builders must rigorously validate all mathematical equations underpinning their contracts. Collaboration with experts in finance and mathematics is essential to ensure these equations are robust, supported by both stress testing and simulation analysis.

At FWX, we address this by leveraging the expertise of five highly regarded Ph.D. holders in finance and mathematics. These experts have meticulously validated every equation within the platform. Over 100,000 rows of test cases in Excel have been analyzed, confirming that our mechanisms are accurate, reliable, and maintain integrity.

In addition to rigorous mathematical validation, FWX has partnered with leading smart contract auditors to ensure the highest level of security. Our contracts have been thoroughly audited by top-tier firms, including **Valix**, **Inspex**, and the globally renowned **PeckShield**. This dual-layered approach—combining expert financial and mathematical validation with meticulous smart contract auditing—reinforces our commitment to creating a secure and reliable platform for our users.

#### SAFE on both private key and deployment process

FWX uses a Multisig Wallet to authorize changes on the development platform, ensuring that no single individual has full control over code deployment. There is no personal private key involved in deploying or storing user assets. All funds are SAFU, and the Multisig Wallet utilized by FWX has been audited by OpenZeppelin. With multiple key holders involved, the risk of a single point of failure is eliminated, and even the founders do not have sole control over the deployment process
