Just to comment on that bolded part, Certik is not trusted or reputable at all. They are basically equivalent of ICOBench and are willing to give nice score to anyone with enough money.

One example: few months ago I found out that they are auditing https://coinswap.space/, some shitty DeFi platform. Problem with Coinswap is that it was the newest project of a known ponzi scheme Troncase which in the mean time collapsed (you can read more about Troncase here. Anyway, I contacted Certik, gave them all the evidence that same people control both Coinsawap and Troncase, which they of course ignored, and gave them nice rating. And now Coinswap proudly presents Certik on their website, as one of the proofs that they are legit. So, don't trust Certik or anyone else for that matter, as everything can be bought.