fRenPool has not been formally audited, but the underlying code has been through internal audits. Outside dependencies are minimal, relying on the Ren registry contract for epochs timing and registering darknodes. The smart contracts are written in Vyper, allowing anyone with knowledge of Python to read the smart contract. Because of the upgradeable nature of the smart contract, the owners can extract all Ren held within. That is why the owner has been set to a 3/5 multi-signature consisting of 2 from Polymer, 2 from Ren, and 1 independent person. No one person or team can execute an admin exploit against the contract.