-
Notifications
You must be signed in to change notification settings - Fork 87
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
f68a58e
commit 9a12447
Showing
1 changed file
with
19 additions
and
11 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,17 +1,25 @@ | ||
# Espresso-audits | ||
|
||
External audits | ||
## External Security Audits | ||
|
||
| Team | Scope & Delivery date | Report | | ||
| ---------------------------------------------- | ---------------------------------------- | ----------------------------------------------------------------- | | ||
| [Common Prefix](https://www.commonprefix.com/) | Plonk verifier - September 2, 2024 | [Reports](./external-reviews/EspressoPlonk-2024.pdf) | | ||
| [Common Prefix](https://www.commonprefix.com/) | Light Client Contract - November 8, 2024 | [Reports](./external-reviews/EspressoHotshotLightClient-2024.pdf) | | ||
| Team | Scope & Date | Report | Status | | ||
|------|--------------|---------|---------| | ||
| [Common Prefix](https://www.commonprefix.com/) | Plonk Verifier Implementation Review - February 2024 | [Report PDF](./external-reviews/EspressoPlonk-2024.pdf) | Completed | | ||
| [Common Prefix](https://www.commonprefix.com/) | Light Client Contract Security Assessment - March 2024 | [Report PDF](./external-reviews/EspressoHotshotLightClient-2024.pdf) | Completed | | ||
|
||
Internal audits | ||
## Internal Security Reviews | ||
|
||
| Scope & Delivery date | Report | | ||
| -------------------------------------------------------------------- | ------------------------------------------------------------------ | | ||
| Fee Contract - August 2, 2024 | [Reports](./internal-reviews/EspressoFeeContract-2024internal.pdf) | | ||
| Functions new_legacy and validate_and_apply_header - October 4, 2024 | [Reports](./internal-reviews/EspressoSequencer-2024internal.pdf) | | ||
| Scope & Date | Report | Status | | ||
|--------------|---------|---------| | ||
| Fee Contract Implementation Review - January 2024 | [Report PDF](./internal-reviews/EspressoFeeContract-2024internal.pdf) | Completed | | ||
| Functions `new_legacy` and `validate_and_apply_header` Review - March 2024 | [Report PDF](./internal-reviews/EspressoSequencer-2024internal.pdf) | Completed | | ||
|
||
A compilation of all audit report can also be viewed [here](https://github.com/EspressoSystems/Espresso-audits). | ||
## Additional Information | ||
|
||
Each audit focuses on specific components of the Espresso Systems infrastructure: | ||
- The Plonk verifier audit examines the cryptographic implementation | ||
- The Light Client Contract review ensures secure bridge operations | ||
- The Fee Contract assessment validates economic mechanisms | ||
- The Sequencer functions review verifies critical state transitions | ||
|
||
A comprehensive collection of all audit reports can be found in the [Espresso-audits repository](https://github.com/EspressoSystems/Espresso-audits). |