Most of pools are developed and deployed by external DeFis (e.g. Uniswap, Yearn, etc) and are subject to their smart contract risks. Currently only the smart contracts of the auto-invest Farms are developed be Furucombo team and those contracts have been audited.
On Furucombo, we use a proxy contract and handler contracts to execute your transactions across different DeFi protocols. Once the transaction is executed successfully, the proxy contract sends all the funds back to your wallet. That being said, the proxy contract does not hold any funds.