# Security & Audits

### Audits & external security partners

TMS / Decubate infrastructure has been audited by multiple independent firms, including:

* **Hacken**\
  Decubate engaged Hacken for a **smart contract code review and security analysis**.\
  In the April 2023 report, Hacken assessed Decubate’s smart contracts, found **no critical or high issues**, and assigned a **10/10 security score**, with only one low-severity finding that did not impact asset safety. [wp.hacken.io](https://wp.hacken.io/wp-content/uploads/2023/04/Decubate_SC-Audit-Report_05-04-2023_SA-1181.pdf)
* **CertiK**\
  Decubate is listed on **CertiK Skynet** with multiple completed smart contract audits.\
  The Skynet page currently shows **3+ audits** for Decubate (including addendums), with the **latest audit delivered on August 21, 2024**, and no critical findings reported in the public summary. [skynet.certik.com](https://skynet.certik.com/projects/decubate)
* **HYDN Security**\
  Decubate publicly partnered with **HYDN Security** and announced that HYDN completed a **full audit of our vesting contracts**, adding HYDN to our long-term list of security partners. [coinmarketcal.com](https://coinmarketcal.com/en/event/hydn-security-partner-265344?utm_source=chatgpt.com)
* **Additional audit partners (from Decubate docs)**\
  Our public security page also references ongoing audit coverage by **Kalos Security** and our internal security team, alongside Hacken, CertiK, and HYDNSecurity. [docs.decubate.com](https://docs.decubate.com/security/)

You can explore public artifacts and contracts in our **Decubate Public Repository** on GitHub, which is explicitly intended for community review and verification: [GitHub](https://github.com/Decubate-com/public-repository)

```
https://github.com/Decubate-com/public-repository
```

***

#### How to weave this into your `/security` page

You can replace the generic “audited by industry leaders” line with something like:

> Our core token management infrastructure (vesting, staking, and related contracts) has undergone security audits by multiple independent firms, including **Hacken**, **CertiK**, **HYDNSecurity**, and **Kalos Security**, in addition to continuous review by our internal security team. Public audit entries and code references are available via:
>
> * Hacken’s published smart contract audit report
> * CertiK Skynet (multiple Decubate audits, latest August 21, 2024)
> * HYDN’s public partnership and vesting-contract audit announcement
> * Our **Decubate Public Repository** on GitHub for community verification


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://tms-finance.gitbook.io/tms.finance/general/security-and-audits.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.