> ## Documentation Index
> Fetch the complete documentation index at: https://docs.layerswap.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Security

> Review the verified security properties of the Layerswap Depository and Widget delivery model.

Read the pages for the parts you're integrating, and do your own review before you move real funds.

## Depository contract

The Layerswap Depository smart contract has been audited by Hexens. For additional security context, see the [full audit report](https://hexens.io/audit-reports/layerswap-depository-mar-2026) before integrating the [Depository funding method](/api/funding/depository).

An audit is evidence about the reviewed code and scope; it is not a guarantee against every implementation, operational, or integration risk.

## Widget delivery

The React and JavaScript packages securely load the Widget from Layerswap’s CDN. The loader verifies an ECDSA P-256 manifest signature and SHA-384 integrity metadata before executing remote chunks.

[Widget delivery and security](/widget/delivery-and-security) is the canonical reference for the trust root, validation sequence, Content Security Policy, failure behavior, and release channel.

## Operational visibility

The [Layerswap Explorer](https://layerswap.io/explorer) provides a public view of swap progress and related transactions. API integrations should also store the swap ID and inspect the lifecycle and transaction hashes returned by the API.

## TRAIN protocol

The upcoming [TRAIN protocol](https://docs.train.tech) will enable cross-chain transfers using atomic swaps. TRAIN is not yet part of the current Layerswap integrations.