Skip to main content

Audited by CertiK

The RWANFTFI smart contracts have been independently audited by CertiK. Final report published April 28, 2026 — full PDF below, and on the public CertiK Skynet directory.
CertiK is one of the longest-established security firms in Web3 and audits a significant share of the major protocols in the space. The audit was conducted using their standard methodology — Static Analysis, Manual Review, and Formal Verification — and the full report is published publicly, both on this page and on CertiK’s own Skynet directory.

​
How can I verify the audit report?

You have three independent ways to interact with the audit. The point isn’t to give the same thing three times — it’s so there is no doubt the version on this page matches the version CertiK itself publishes, and so the report is accessible regardless of device.

Inline Preview

Read the full PDF directly on this page. Best in desktop browsers.

Download PDF

Save the original report to your device. Recommended on mobile.

CertiK Skynet

Verify the report on CertiK’s own public directory.
On Safari and most mobile browsers the inline preview may not render — those browsers do not embed PDFs directly. Use the Download PDF button (or the link inside the preview area) to open the report on your device.

​
How are accounts protected at the application layer?

The audit covers the on-chain smart contract layer. At the application layer, user accounts are additionally protected by several independent mechanisms:

Three-Level Security

Tiered protection separating login, financial actions, and high-value operations.

TAN Codes

Single-use Transaction Authentication Numbers required for every financial transaction.

Financial Password

A password separate from your login credentials, required only for moving funds.

2FA + Telegram Bot

Standard two-factor authentication, plus action verification through the official Telegram bot.
Transactions require a Web3 wallet. You can sign in to the dashboard with email and password to view your data, but executing any financial action requires a connected Web3 wallet (MetaMask, Trust Wallet, or another EVM-compatible wallet).
Beware of impersonators. RWANFTFI staff will never contact you first, never ask for your private keys or seed phrase, and never request payments outside the official platform. Always verify you are on rwanftfi.com before connecting your wallet or entering credentials.