Security Audits for OpenVM
All production releases of OpenVM undergo both internal and external security audits. Reports from these audits are available on the OpenVM Github as outlined below.
Manual Security Reviews
Manual reviews conducted by security researchers are listed below.
| OpenVM Release | Audit Type | Auditors | Report |
|---|---|---|---|
| v1.0.0 | Internal | Axiom | v1-internal |
| v1.0.0 | External | Cantina | v1-cantina |
| v1.1.0 | External | Cantina | v1.1.0-cantina |
| v1.1.1 | External | Cantina | v1.1.1-cantina |
| v1.3.0 | External | Cantina | v1.3.0-cantina |
| v1.4.0 | External | Cantina | v1.4.0-cantina |
| v1.4.1 | External | Cantina | v1.4.1-cantina |
| v1.5.0 | External | Cantina | v1.5.0-cantina |
Formal Verification
Parts of the OpenVM system have been formally verified using mathematical proofs (e.g., via Lean). Formal verification reports are listed below.
| OpenVM Release | Audit Type | Auditors | Report |
|---|---|---|---|
| v1.5.0 | External | Nethermind | RV32IM Lean |