# Vyper audits
- Vyper conducts security reviews with:
    - [ChainSecurity](https://chainsecurity.com/),
    - [OtterSec](https://osec.io/),
    - [Statemind](https://statemind.io/), and
    - [Anatomist](https://github.com/th3anatomist)

- during the fall of 2023, Vyper also conducted a general competitive audit with [CodeHawks](https://www.codehawks.com/contests/cll5rujmw0001js08menkj7hc)
- during the winter of 2024, Vyper participated in [Ethereum Attackathon](https://reports.immunefi.com/ethereum-protocol-or-attackathon?utm_source=boost_program_page) with Immunefi 

## 2025
- [Anatomist, April 2025](audits/Anatomist_Vyper_April_2025.pdf)
    - v0.4.2 release
- [ChainSecurity, April 2025](audits/ChainSecurity_Vyper_April_2025.pdf)
    - v0.4.2 release
- [ChainSecurity, June 2025](audits/ChainSecurity_Vyper_June_2025_limited_review.pdf)
    - v0.4.2 release fix review
    - `raw_return` decorator

## 2024
- [Statemind, January 2024](audits/Statemind_Vyper_January_2024_audit.pdf)
    - Storage layout v0.1.0b16-v0.3.10
- [ChainSecurity, February 2024](audits/ChainSecurity_Vyper_February_2024_limited_review.pdf)
    - Modules
    - Various breaking changes introduced for `v0.4.0`
- [ChainSecurity, April 2024](audits/ChainSecurity_Vyper_April_2024_limited_review.pdf)
  - Codegen pipeline
- [Statemind, June 2024](audits/Statemind_Vyper_June_2024_audit.pdf)
    - Storage layout and Modules v0.3.10-v0.4.0rc4
- [ChainSecurity, June 2024](audits/ChainSecurity_Vyper_June_2024_limited_review.pdf)
    - ABI decoder  and v0.4.0 PRs
- [OtterSec, June 2024](audits/OtterSec_Vyper_June_2024.pdf)
  - Vyper 0.4.0 release

## 2023
- [ChainSecurity, January 2023](audits/ChainSecurity_Vyper_January_2023_limited_review.pdf)
    - Front-End and Type System
        - Refactoring of the front-end type system
        - Front-end and codegen type system merge
- [ChainSecurity, March 2023](audits/ChainSecurity_Vyper_March_2023_limited_review.pdf)
    - Front-End and Type System
        - Front-end and codegen type system merge
- [ChainSecurity, May 2023](audits/ChainSecurity_Vyper_May_2023_limited_review.pdf)
    - Semantic analysis and Code generation
        - Security advisory fixes
- [ChainSecurity, September 2023](audits/ChainSecurity_Vyper_September_2023_limited_review.pdf)
    - Semantic analysis and Code generation
        - Function selector
        - Built-ins
- [OtterSec, September 2023](audits/OtterSec_Vyper_September_2023_audit.pdf)
    - Release [v0.3.10rc1](https://github.com/vyperlang/vyper/releases/tag/v0.3.10rc1)
- [CodeHawks, September 2023](audits/CodeHawks_Vyper_September_2023_competitive_audit.md)
    - General Competitive Audit
    - [full results](https://www.codehawks.com/report/cll5rujmw0001js08menkj7hc)
- [OtterSec, November 2023](audits/OtterSec_Vyper_November_2023_audit.pdf)
    - Built-ins
- [ChainSecurity, December 2023](audits/ChainSecurity_Vyper_December_2023_limited_review.pdf)
    - Built-ins and Bytecode Generation
  
## 2022

- [ChainSecurity, July 2022](audits/ChainSecurity_Vyper_July_2022_limited_review.pdf)
    - Compiler IR optimizer and safe-math module