Skip to content

docs: Add audit report #112

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
May 1, 2025
Merged

docs: Add audit report #112

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
181f0ba
Create .test
kristovatlas Oct 10, 2024
126ddb6
add audit details
kristovatlas Mar 28, 2025
5b1bd29
remove unneeded file
kristovatlas Mar 28, 2025
33b136c
Update SECURITY.md
tbruyelle May 1, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,3 +19,12 @@ following venues:
We will respond within 3 business days to all received reports.

Thank you for helping to keep our ecosystem safe!

## Security Audits

- March 2025: The security firm Zellic conducted a source code audit of the AtomOne daemon and
published a [report](docs/AtomOne%20-%20Zellic%20Audit%20Report.pdf) on March 11, 2025. Zellic has
independently published this report
[here](https://github.com/Zellic/publications/blob/master/AtomOne%20-%20Zellic%20Audit%20Report.pdf)
with a SHA-256 hash of 60625f148263829921f7b8cc4a065290b197ddb869ba821f7dc4cfe4a4f96ff1.
The audit scope was the whole codebase with a specific focus on the new `x/photon` module and the [dynamic deposit proposal](https://github.com/atomone-hub/atomone/pull/69) from the `x/gov/` module.
Binary file added docs/AtomOne - Zellic Audit Report.pdf
View file
Open in desktop
Binary file not shown.
Loading