> ## Documentation Index
> Fetch the complete documentation index at: https://docs.axcess.finance/llms.txt
> Use this file to discover all available pages before exploring further.

# Contract Audit

The Axcess vault contracts have been independently audited. This page summarises the audit and the status of its findings, identifies the changes made since, and describes the controls that govern the contracts after deployment.

## Independent Audit

| | |
| :- | :- |
| **Auditor** | [CredShields](https://credshields.com) |
| **Engagement** | Smart contract security audit of the Axcess Loan Vaults |
| **Method** | Manual review of the contract source by CredShields' security team |
| **Report** | [https://github.com/Credshields/audit-reports/blob/master/Audit\_Report\_Axcess\_Loan\_Vaults.pdf](https://github.com/Credshields/audit-reports/blob/master/Audit_Report_Axcess_Loan_Vaults.pdf) |

The review covered the on-chain business logic, access controls, state transitions, and edge-case handling across lending, redemption, termination, and delinquency. It examined in particular whether contract behaviour remains consistent under a pause, a token blacklist, a lender revocation, and the maturity of withdrawal requests.

## Findings

The audit reported 17 findings.

| Severity | Reported | Fixed | Acknowledged |
| :- | :- | :- | :- |
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 11 | 8 | 3 |
| Low | 6 | 4 | 2 |
| Informational | 0 | 0 | 0 |
| **Total** | **17** | **12** | **5** |

## Reporting a Vulnerability

Security researchers can report a suspected vulnerability to [contact@axcess.finance](mailto:contact@axcess.finance). A report should describe the issue, the affected contract or service, and the steps needed to reproduce it. Axcess asks that details are not disclosed publicly until the issue has been assessed and addressed.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.