If a vulnerability is discovered during the audit, the audit company will typically provide recommendations for fixing the issue. The contract's code will then be adjusted, and the audit process may be repeated.