Smart contracts: programs that hold money
Almost everything in crypto beyond simply holding a coin is a smart contract. Understanding what they can and cannot do explains most of the risk in the asset class.
What one actually is
A smart contract is a program stored on a blockchain at an address. Send it a transaction and it runs, deterministically, on every node. Same input, same result, every time, everywhere.
It is not a legal contract and it is not smart. It is code that holds money and executes rules automatically. A vending machine is the usual analogy and it is a good one: put the right thing in, get the defined thing out, no human deciding.
What makes them genuinely different from normal software
What they cannot do, which people constantly assume they can
- They cannot see the outside world. A contract has no idea what the dollar price of anything is. It only knows what somebody has put on chain. That is what oracles are for, and oracles are a common attack surface.
- They cannot run on a schedule. Nothing happens until someone sends a transaction. "Automatic" liquidations are actually bots watching and calling a function.
- They cannot generate real randomness. Everything must be deterministic, so naive randomness is predictable and has been exploited repeatedly.
- They cannot reverse anything. No undo, no support, no chargeback.
What an audit actually proves
An audit means a security firm read the code for a defined period and reported what they found. It is genuinely valuable and it is not a guarantee, and the industry routinely presents it as one.
What actually correlates with safety is time in production holding real money. Uniswap v2 and v3 have held billions for years without a core exploit. That is not proof either, and it is far stronger evidence than a PDF.
Upgradeable contracts, and the trust they quietly reintroduce
Because bugs cannot be patched, many projects deploy a proxy: a permanent address that forwards calls to a logic contract which can be swapped out. Now bugs can be fixed.
It also means whoever controls the upgrade key can replace the logic entirely, including with logic that drains everything. The immutability guarantee is gone. That may be a reasonable trade, and you should know which situation you are in.
Where this shows up for you personally
Every approval you grant is permission for a contract to move your tokens. Every swap, every deposit, every stake is you trusting code. That is why the approvals module in Level 2 matters so much: the contract does not need to be malicious today, only exploitable eventually, and your approval is still live.
BEFORE YOU MOVE ON
Common questions
What is a smart contract in simple terms?
A program stored on a blockchain that holds money and runs automatically when someone sends it a transaction. It is not legal and not intelligent, it is code with funds attached.
Are audited smart contracts safe?
No. An audit means a firm reviewed the code for a period. Balancer was audited repeatedly over five years and still lost over 100 million dollars in 2025. Time in production holding real value is stronger evidence than an audit report.
What is an upgradeable contract?
A design where a permanent address forwards calls to logic that can be replaced. It allows bug fixes and means whoever holds the upgrade key can change the rules, so immutability no longer protects you.
Risk warning: crypto is highly volatile and largely unregulated. You can lose everything you put in. Nothing here is financial, investment or tax advice.