What Are the Limitations of a Smart Contract Audit?
Audits are a snapshot in time and only guarantee the code is secure against known vulnerabilities at the time of the review. They do not guarantee the business logic is sound, nor do they cover bugs introduced after the audit or in off-chain components.
They are a necessary but not sufficient condition for security.