What an audit or scanner actually covers

An audit is an assessment of a defined target. A scanner applies particular rules to available data. Neither can establish every private agreement, future administrator action or human intention associated with a project.

Read beyond the badge

Identify the reviewed version and deployed addresses. Check whether the work included upgrade roles, external dependencies, the frontend and economic assumptions. Read unresolved findings and later changes. A report for an old contract does not automatically describe the current product.

A verified-source label generally concerns a match between published source and compiled deployment under the verification process. It does not mean the code has been reviewed for all risks. A clean automated score says only what that tool's coverage supports.

MASTR's Survival Guide applies the same limit to multisigs, liquidity locks and company registrations: a real narrow property should not be expanded into a guarantee. A useful review states what would require reassessment, such as a contract upgrade, authority change or material liquidity change.

来源

1. MASTR: Crypto Survival Guide, four original panels
2. MASTR Research: From Decentralisation to Attention Capture, July 2026

资料核对日期：2026年9月5日. Historical cases retain the date and legal status of the cited record.