https://ostif.org/the-openvpn-2-4-0-audit-by-ostif-and-quark...
Matthew Green/Cryptography Engineering audit direct link, which focuses more heavily on the protocol design, as well as a 2.2->2.4 changelog audit:
https://www.privateinternetaccess.com/blog/2017/05/openvpn-2...