Skip to main content
TL;DR: OpenZeppelin audited the protocol and subsequent extensions. The September report covers the v2 contract and circuit extensions, including portal deposits, gifts, external call gateways, and account-owner spend approvals. The audited code is published in the public repository at d4c20ae, and the current code includes later changes. Each report identifies its reviewed code and scope.

OpenZeppelin Audit (September 2026)

Read the Protocol Extensions audit report covering the v2 contracts and circuits (PDF)

OpenZeppelin Audit (May 2026)

Read the AuthRegistry smart wallet signature support audit report (PDF)

OpenZeppelin Audit (March 2026)

Read the full protocol audit report (PDF)