Security audits

Dear all, I would like ask who does your security audits? Thanks

I contact Blaize Tech

It depends on what needs to be assessed! The range of services and expertise across vendors is not a one-size-fits-all thing, and throughout my time contributing to Cosmos I have evaluated a pretty hefty list of assessment firms who are good at different things.

What are you wanting to have audited? Knowing language, and what the thing is (an SDK module, a smart contract, etc.) helps with the matchmaking process. Though the initial set of security assessments of various Cosmos components (2017-2019) included NCC Group, Include Security, Kudelski Security, Least Authority, and Trail of Bits, the market for services (and willingness of firms to look at blockchain code) is much different than it was just a few years ago.

4 Likes

That’s a fantastic answer Jesse!

I would also like to say that notional has begun to offer audit services, although this does depend as you exactly said, on what the needs of the audit are.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.