How do we know that the contract is secure? Has it had any audit? Is there any bug bounty open for it?