# Security Audits by Informal Systems

Informal Systems apply a multi-layered, automated approach to our security
audits for the blockchain ecosystem. Under the guidance of leading researchers
in protocol design, verification, and testing, we leverage
our formal verification techniques and tools -- including [Quint specification language](https://github.com/informalsystems/quint), [Apalache model checker](https://apalache.informal.systems/), or [Atomkraft E2E testing tool](https://github.com/informalsystems/atomkraft) -- to make distributed
systems secure and resilient.

You may read more about our approach at the
[Security Services page](https://informal.systems/services/security-audits).

## Public Audit Reports


| Audit date(s) | Client | Audit report | Announcement |
| ----  | ----  | --- | --- |
| 2026 | [Zenrock](https://zenrocklabs.io) | [Zenrock Q1 2026 - Hush Privacy Protocol](./Zenrock/Zenrock%20Q1%202026%20-%20Hush%20Privacy%20Protocol%20Audit%20Report.pdf) | |
| 2025 | [Anoma](https://anoma.net) | [Anoma Q4 2025: RISC Zero RM & EVM Protocol Adapter](./Anoma/Anoma%20Q4%202025%20-%20RISC%20Zero%20RM%20%26%20EVM%20Protocol%20Adapter%20Audit%20Final%20Report_v2.pdf) | |
| 2025 | [Anoma](https://anoma.net) | [Anoma Q2 2025: E2E Shielded Transaction & Balance Consistency](./Anoma/Namada%20Q2%202025_%20E2E%20Shielded%20Transaction%20%26%20Balance%20Consistency%20Audit%20Report_Final.pdf) | |
| 2025 | [Neutron](https://neutron.org) | [Neutron Q3 2025: DEX Fractional](./Neutron/2025-07-30%20Neutron%20Q3%202025%20_%20DEX%20Fractional%20Banking%20Audit%20Report_Final.pdf) | |
| 2025 | [Neutron](https://neutron.org) | [Neutron/Timewave Q3 2025: Valence Protocol](./Neutron/2025-07-18%20Neutron-Timewave%20Q2%202025%20_%20Valence%20Protocol%20Audit%20Report_Final.pdf) | |
| 2025 | [Celestia](https://celestia.org) | [Celestia Q2 2025: High-Throughput Recovery Audit](./Celestia/Celestia%20Q2%202025%20_%20High-Throughput%20Recovery%20Audit%20Report_Final%20v2.pdf) | |
| 2025 | [Espresso](https://www.espressosys.com/) | [Espresso Q1 2025: Epoch Change Protocol](./Espresso/Espresso%20Q1%202025%20_%20Epoch%20Change%20Protocol%20Audit%20Report_Final.pdf) | |
| 2025 | [Apex](https://apexfusion.org/) | [Apex Q1 2025: Reactor and Skyline critical path](./Apex/Apex%20Q1%202025%20_%20Reactor%20%26%20Skyline%20Critical%20Path%20Audit%20Report_Final.pdf) | |
| 2025 | [Celestia](https://celestia.org) | [Celestia Q2 2025: CIP 31](./Celestia/Celestia%20Q2%202025_%20CIP-31%20Audit%20Report_Final.pdf) | |
| 2025 | [Left Curve](https://left-curve.github.io/) | [Jellyfish Merkle Tree Specification](https://github.com/left-curve/left-curve/tree/main/grug/jellyfish-merkle/spec) | [Finding](https://github.com/left-curve/left-curve/pull/291) |
| 2025 | [Ripple](https://ripple.com) | [XRPL EVM Sidechain](https://github.com/informalsystems/audits/blob/main/Ripple/2025-03-25%20XRPL%20EVM%20Sidechain.pdf) | [Blog post by Ajit Kulkarni (Ripple)](https://dev.to/ripplexdev/strengthening-xrpl-evm-sidechain-key-takeaways-from-informal-systems-security-audit-4dme) |
| 2024 | [DYDX](https://dydx.exchange) | [DYDX: Vaults](https://github.com/dydxprotocol/v4-chain/blob/main/audits/Informal-Systems-Audit-Report-2024-Q2%2B.pdf) | |
| 2024 | [DYDX](https://dydx.exchange) | [DYDX: Q2 Audit](https://github.com/dydxprotocol/v4-chain/blob/main/audits/Informal-Systems-Audit-Report-2024-Q2.pdf) | |
| 2024 | [DYDX](https://dydx.exchange) | [DYDX: Q1 Audit](https://github.com/dydxprotocol/v4-chain/blob/main/audits/Informal-Systems-Audit-Report-2024-Q1.pdf) | |
| 2023 | [DYDX](https://dydx.exchange) | [DYDX: Q4 Audit](https://github.com/dydxprotocol/v4-chain/blob/main/audits/Informal-Systems-Audit-Report-2023-Q4.pdf) | [Blog Post by dYdX](https://www.dydx.xyz/blog/dydx-chain-audit) |
| 2024 | [Neutron](https://neutron.org) | [Neutron: Dex Model](./Neutron/2024-12-11%20Neutron%20Dex%20Model.pdf) | |
| 2024 | [Anoma](https://anoma.net) | [Namada: Governance and Public Goods Funding](./Anoma/2024-12-11%20Namada%20Governance%20&%20PGF.pdf) | |
| 2024 | [Anoma](https://anoma.net) | [Namada: IBC & MASP Integrations](./Anoma/2024-08-16%20IBC%20and%20MASP%20integrations%20Final%20Report.pdf) | |
| 2024 | [Anoma](https://anoma.net) | [Namada: Namada ABCI, Replay Protection, Fee and Gas Metering](./Anoma/2024-04-30%20Namada%20ABCI,%20Replay%20Protection,%20Fee%20And%20Gas%20Metering%20Final%20Report.pdf) | |
| 2024 | [Anoma](https://anoma.net) | [Namada: Masp](./Anoma/2024-02-26%20Namada%20MASP%20Final%20Report.pdf)| [Blog Post by Namada](https://namada.net/blog/namada-mainnet-is-live) |
| 2023 | [Neutron](https://neutron.org) | [Neutron: Duality v0.5.0 + integration of Cosmos SDK 0.47](./Neutron/2023-11-11%20Audit%20Report%20-%20Neutron%20-%20Duality%20v0.5.0%20+%20integration%20of%20Cosmos%20SDK%200.47.pdf) | [Blog Post by Neutron](https://blog.neutron.org/introducing-duality-the-next-evolution-in-defi-trading-e807b63e17c1) |
| 2023 | [Neutron](https://neutron.org) | [Neutron: Overrule + Liquidity Migration Smart Contracts](./Neutron/2023-11-05%20Audit%20Report%20-%20Neutron%20Smart%20Contracts%20-%20Overrule%20+%20Liquidity%20Migration.pdf) | |
| 2023 | [Celestia](https://celestia.org) | [Celestia: rsmt2d library](./Celestia/2023-09-13%20Audit%20Report%20Celestia%20rsmt2d%20library.pdf) | |
| 2023 | [Osmosis](https://osmosis.zone) | [Osmosis: Concentrated Liquidity module](./Osmosis/2023-06-23%20Audit%20Report%20-%20Osmosis%20Q2.pdf) | |
| 2023 | [Duality](https://duality.xyz) | [Duality: Dex and Incentives modules](./Duality/2023-05-16%20Audit%20Report%20-%20Duality%20Dex%20and%20Incentives%20modules.pdf) | |
| 2023 | [Skip](https://skip.money) | [Skip: mev-tendermint](./Skip/2023-04-11%20Audit%20Report%20-%20Skip%20Mev%20Tendermint.pdf) | |
| 2023 | [Neutron](https://neutron.org) | [Neutron: Neutron-SDK, DAO, Wasmd, TGE contracts](./Neutron/2023-04-06%20Audit%20Report%20-%20Neutron%20SDK%20DAO%20Wasmd%20TGE%20.pdf) | |
| 2023 | [Celestia](https://celestia.org) | [Celestia: Namespaced Merkle Tree](./Celestia/2023-03-27%20Audit%20-%20Celestia%20NMT.md) | |
| 2023 | [Osmosis](https://osmosis.zone) | [Osmosis: Crosschainswaps and Swaprouter modules](./Osmosis/2023-03-27%20Audit%20-%20Osmosis%20Crosschainswaps%20Swaprouter.md) | |
| 2023 | [Osmosis](https://osmosis.zone) | [Osmosis: Token Transfer Analysis Testing](./Osmosis/2023-03-27%20Audit%20-%20Osmosis%20Token%20Transfer%20Analysis%20Testing.md) | |
| 2023 | [Cosmos Hub](https://hub.cosmos.network/main/hub-overview/overview.html) | [Interchain Security v.1.0: Provider Chain Safety](./Cosmos%20Hub/2023-02-10%20Audit%20Report%20-%20ICS%20replicated%20security.pdf) | |
| 2023 | [Anoma](https://anoma.net) | [Anoma Audit Partnership: Proof of Stake](./Anoma/2022-2023%20Audit%20Partnership%20-%20Anoma%20Proof%20of%20Stake.md) | |
| 2022 | [Celestia](https://celestia.org) | [Celestia: Payment Module](./Celestia/2022-12-25%20Audit%20-%20Celestia%20Payment%20Module.md) | |
| 2022 | [Osmosis](https://osmosis.zone) | [Osmosis: TWAP and GAMM modules](./Osmosis/2022-12-20%20Audit%20-%20Osmosis%20TWAP%20GAMM.md) | |
| 2022 | [Stride](https://www.stride.zone) | [Stride: StakeIBC and ICACallbacks Modules](./Stride/2022-11-30%20Audit%20Report%20-%20Stride%20StakeIBC%20ICACallbacks.pdf) | |
| 2022 | [Osmosis](https://osmosis.zone) | [Osmosis: Token Factory](./Osmosis/2022-09-30%20Audit%20-%20Osmosis%20Token%20Factory.md) | |
| 2023 | [Delphi Labs](https://delphilabs.io) | [Mars Protocol: Envoy module](./Mars%20Protocol/2023-02-03%20Audit%20report%20-%20Mars%20Protocol%20Envoy%20module.pdf) | |
| 2022 | [Agoric](https://agoric.com) | [Agoric: Swingset Kernel, Comms, and Userspace, Phase 3](./Agoric/informal-agoric-report-phase3.pdf) | |
| 2021 | [Evmos](https://evmos.org) | [Evmos: Intrarelayer, Staking, and EVM modules](./Evmos/informal-evmos-report-2021q4.pdf) | |
| 2021 | [Agoric](https://agoric.com) | [Agoric: Swingset Kernel and Userspace, Phase 2](./Agoric/informal-agoric-report-phase2.pdf) | |
| 2021 | [Interlay](https://www.interlay.io) | [InterBTC: Parachain Modules and Vault Client](./Interlay/informal-report-interlay-audit-2021Q3.pdf) | [Blog Post by Gregory Hill (Interlay)](https://medium.com/@greg.interlay/informal-systems-interbtc-audit-57c55026e1d2) |
| 2021 | [Agoric](https://agoric.com) | [Agoric: Swingset Kernel and Userspace, Phase 1](./Agoric/informal-agoric-report-phase1.pdf) | |
| 2021 | [Injective](https://injective.com) | [Injective Protocol: Protocol Design](./Injective/informal-report-injective-audit-202106.pdf) | [Blog Post by Injective](https://blog.injective.com/injective-passes-the-informal-systems-audit-with-flying-colors/) |
| 2021 | [Interlay](https://www.interlay.io) | [InterBTC: Parachain](./Interlay/informal-report-interlay-audit-2021Q2.pdf) | |
| 2021 | [DYDX](https://dydx.exchange) | [DYDX: Phase III](https://github.com/dydxprotocol/v4-chain/blob/main/audits/Informal-Systems-Audit-Report-Phase-III.pdf) | [Blog Post by dYdX](https://www.dydx.xyz/blog/dydx-chain-audit) |
| 2021 | [DYDX](https://dydx.exchange) | [DYDX: Phase I & II](https://github.com/dydxprotocol/v4-chain/blob/main/audits/Informal-Systems-Audit-Report-Phase-I-II.pdf) | [Blog Post by dYdX](https://www.dydx.xyz/blog/dydx-chain-audit) |
| 2021 | [IBC Protocol](https://ibcprotocol.org) | [IBC: Interblockchain Communication Protocol Specification and Code](./IBC-GO/report.pdf) | |