It passed an audit, so how could the project still be attacked?
First, what are they? Many protocols run bug bounty programs, offering rewards to white-hat hackers who proactively report vulnerabilities.
How it works: Contracts that have been live for a long time and have been tested with large amounts of funds are generally considered more reliable, but that doesn’t mean they’re vulnerability-free.
Ethereum, where $ETH is located, is one of the earliest public blockchains to support general-purpose smart contracts.
Only invest what you can afford, and leave yourself some room to spare.

NFA, DYOR.