Skip to main content
TL;DR: OpenZeppelin audited the protocol and subsequent extensions. The September report covers the v2 contract and circuit extensions, including portal deposits, gifts, external call gateways, and account-owner spend approvals. It reviewed the protocol at commit 17ea3f7d, and the current code includes changes beyond the reviewed commit. Each report identifies its reviewed code and scope.

OpenZeppelin Audit (September 2026)

Read the Protocol Extensions audit report covering the v2 contracts and circuits (PDF)

OpenZeppelin Audit (May 2026)

Read the AuthRegistry smart wallet signature support audit report (PDF)

OpenZeppelin Audit (March 2026)

Read the full protocol audit report (PDF)