Skip to main content

Reviewed by CertiK

CertiK reviewed the smart contracts and code version included in the published audit scope. The final report is dated 28 April 2026 — full PDF below, and on the public CertiK Skynet directory.

​
Audit Details

​
How can I verify the audit report?

Inline Preview

Read the full PDF directly on this page. Best in desktop browsers.

Download PDF

Save the original report to your device. Recommended on mobile.

CertiK Skynet

Verify the report on CertiK’s own public directory.
On Safari and most mobile browsers the inline preview may not render — those browsers do not embed PDFs directly. Use the Download PDF button (or the link inside the preview area) to open the report on your device.
The audit covers the smart contracts and code version within the published scope. It does not by itself verify protocol economics, corporate performance, or user outcomes.

​
Four Layers of Account Security

Financial Password

A password separate from login credentials, required for financial actions.

Secret Code

A random word generated with the financial password. Required for any security-related request to support.

Transaction Authorization Codes

Single-use codes required to authorize financial transactions.

Two-Factor Authentication

Supported two-factor authentication for account protection.

​
Account Recovery via DAO

The RWANFTFI team has no access to users’ businesses. Only a DAO vote can move an account to a new wallet. This was tested in June 2026: a user’s account was hacked and the whole business, the NFT and the partner structure, was stolen while Business Sale was temporarily enabled. The DAO disabled Business Sale and moved the business to a new wallet controlled by its verified owner; both proposals were executed on-chain. See Governance — DAO.

​
AML Screening

AML Checker

Check any wallet address against sanctions, mixers, scams, and hacks before sending or receiving funds: a risk score across 19 blockchains and 14 stablecoins.

​
Private Messaging

The built-in messenger offers Private Web3 chats: end-to-end encrypted messages on the XMTP protocol (MLS), which are not stored on the platform’s servers. See Platform Features.

​
Official Domains

Official contract addresses, including the Diamond, the DAO, and the Token Reserve, are listed at app.rwanftfi.com/smart-contracts.
Use only the domains above and the official contract addresses; any other domain, including a look-alike spelling, is not official. RWANFTFI representatives never request private keys, seed phrases, or payments to unofficial wallet addresses. Check the domain before connecting a wallet or entering credentials.