PSA to those of you regularly using new products: Audits cost hundreds of thousands of dollars and take weeks to complete. Self-bootstrapped startups can't even afford them. There's actively a disincentive for your favorite protocols to stay on top of security, as it impedes their ability to iterate and find pmf. Do they pay $50k to audit a new feature that it turns out nobody uses? Make sure what you're using has been audited by someone you trust, and that what's running on mainnet is the code that was audited (verified builds, open source required). If you can't verify that's fine, but don't put all your eggs in that one basket. Solana Foundation has a program that provides audits for anyone with more than $10m TVL, which should definitely help.