For more information about Aragon-related security and contact information, please visit our security policy page.
The liquidity reward pools are lightly forked versions of Synthetix's original contract.
You can see the original audit for the Synthetix contract, as well as the diffs of the contract for each program ran: