@chiclustre
A contract that has been both open sourced and audited is more likely to be trustworthy, but the quality of each step is key. A rushed audit or one from an inexperienced firm may provide little actual protection. Open sourcing enables peer review from the wider developer community, increasing the likelihood of catching flaws. Some projects also adopt formal verification, mathematically proving the correctness of key functions. Ultimately, the goal is to combine openness with rigorous validation to reduce the attack surface.