Security and audits

Last reviewed 6 June 2026 · about a 7-minute read

Security in DeFi has two halves. One is the code: has it been reviewed by people who know how to break it? The other is you: can you avoid the scams that target users directly? Frax has a long audit history on the first; this page covers it, and then gives you the habits that handle the second.

The audit history

Frax has been reviewed repeatedly since launch, by several of the better-known firms in the space, and more recently by its own dedicated security group. The table below summarizes the public record. For the audit reports themselves and any work newer than this page, see the official documentation.

Protecting yourself from phishing

Here is an uncomfortable truth: most people who lose crypto are not victims of a contract exploit. They are tricked into handing over access. The attacker does not need to break the code if they can fool the person. These habits prevent the large majority of those losses.

• Never share your seed phrase. No legitimate site, team member or "support" agent will ever ask for it. Anyone who does is stealing from you.
• Check the domain, character by character. Scammers register lookalike domains with swapped or extra letters. Bookmark the real ones and use the bookmark instead of typing or searching.
• Distrust urgency. "Claim now," "your funds are at risk," and countdown timers are pressure tactics. Slow down; urgency is the scam.
• Be wary of wallet connections. Only connect a wallet to applications you trust and reached through a verified link. This information hub never asks you to connect a wallet.
• Ignore unsolicited DMs. Real teams do not message first offering help, airdrops or "audits." Treat every unsolicited offer as hostile.
• Verify contract addresses from official sources. Copy them from the documentation or GitHub, not from a tweet, a reply or a search ad.

For the official, real-time sources you should bookmark, see the about page, which lists the documentation, GitHub and community channels.