The contracts are audited. However, there can still be bugs in the smart contract code.
The protocol maintains a buffer to mitigate the economic risks in underlying yield-generating protocols. Yield generating protocols are selected such that there are minimal economic risks. However, the protocol inherits the economic risks of its yield-generating protocols.