> For the complete documentation index, see [llms.txt](https://flowrouter.gitbook.io/flowrouter-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://flowrouter.gitbook.io/flowrouter-docs/reference/audits.md).

# Security audits

Independent security reviews of the FlowRouter smart contracts, with the full reports.

## Guardian, October 2026

[Guardian](https://guardianaudits.com) reviewed the FlowRouter smart contracts in a main review and a remediation review.

{% file src="/files/GLX3norKa4jQklhM0Ft0" %}
Guardian security review of FlowRouter, final report, October 27, 2026 (PDF, 47 pages).
{% endfile %}

| Item               | Value                                                                                                                              |
| ------------------ | ---------------------------------------------------------------------------------------------------------------------------------- |
| Auditor            | Guardian                                                                                                                           |
| Review window      | September 3 – September 21, 2026                                                                                                   |
| Final report       | October 27, 2026                                                                                                                   |
| Methodology        | Smart contract, manual: main review and remediation review                                                                         |
| Contracts in scope | `FlowRouter.sol`, `TokenFlowExecutorV2.sol`, `TokenFlowProgram.sol`, `EkuboV3Operation.sol`, `OnlyApproved.sol`, `TokenHelper.sol` |
| Confidence ranking | 5 of 5, Very High                                                                                                                  |

### Findings

| Severity      | Total  | Resolved | Acknowledged |
| ------------- | ------ | -------- | ------------ |
| Critical      | 0      | 0        | 0            |
| High          | 0      | 0        | 0            |
| Medium        | 0      | 0        | 0            |
| Low           | 10     | 8        | 2            |
| Informational | 18     | 2        | 16           |
| **All**       | **28** | **10**   | **18**       |

The report gives the description, recommendation, and final status of each finding. The statuses are Guardian's.

A security review does not guarantee that a contract has no defects. Read the report's disclaimer before you rely on it.
