It's all open source. You can see the contracts yourself, or read an audit that someone else created. The beauty is that you don't have to trust them, because you can see exactly what can possibly happen with your money by looking at the code.