# Security

Security is one of the highest priorities for us in Rango and we aim to make sure our users are not. \
To achieve this goal we abide by security best practices in industry.

#### **Smart Contracts:** &#x20;

Rango never deploys un-audited smart contracts and we avoid exposing users to risks. Our smart contracts go through rigorous internal and external audits before being used in production. ( Link to Audit reports <https://docs.rango.exchange/smart-contracts/audit-reports>)

Rango uses multi-signature admins wherever necessary.&#x20;

**Protocol Security**

Rango never implements a weak protocol. All bridges/DEXs go through a security vetting mechanism before implementation to ensure user safety. Rango Operation Department always monitors on-chain activity and disables affected protocols which have confirmed incident(s) or security breaches.

**SSL, WAF, Dos & DDoS Protection & Rate Limits**

Rango uses ssl for all communications, all traffic is encrypted from user to edge and origin servers with trusted SSL keys.In addition Rango uses WAF with adaptive rules to detect any attacks and prevent suspicious activity. IDP systems are in place for rapid response to any security issue(s) or attacks as they arise.

**Application Layer**

Rango has implemented circuit breakers, pausing mechanisms and health checks. If any protocol does not look healthy in terms of uptime or liquidity, it is dynamically dropped out of our routing system. The tokens available on our platform are dynamically retrieved from underlying bridges and dexes. We also check for honeypots and tax tokens using third party APIs. &#x20;

**Infrastructure:**

Our infra uses several hardware and software-based firewalls.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.rango.exchange/security.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
