For the complete documentation index, see llms.txt
Security audits
The Midnight Foundation commissions independent security audits of Midnight components. This page lists the published reports.
Each report appears here exactly as the auditor delivered it. The status of each finding reflects the auditor's verification at the code revision named in the report. Later releases may have changed the code.
To report a security vulnerability, follow the Midnight Foundation security policy. Use GitHub private vulnerability reporting, or email security@midnight.foundation. Do not open a public issue.
Audit reports
| Component | Auditor | Report date | Audited code | Report |
|---|---|---|---|---|
| Ledger (including Zswap and DUST) | Least Authority | 19 December 2025 | midnight-ledger at 854e7e7, fixes verified at 0fff805 | |
| Midnight.js | Least Authority | 11 March 2026 | midnight-js at 4255f7b, fixes verified at bdea445 | |
| SHA-3 (Keccak) circuits | Least Authority | 23 February 2026 | sha3-circuit at d75f363, fixes verified at 12addf9 | |
| Midnight circuits: ZkStdLib, Poseidon, BigUint, JSON, and Base64 | zkSecurity | 11 April 2025 | midnight-zk at 6e1454e |
Reports published elsewhere
Each of these reports lives in the repository of the code it audits.
| Component | Auditor | Report date | Report |
|---|---|---|---|
| Upgradable contracts on Cardano (Reserve) | TxPipe | 8 January 2026 | midnight-reserve-contracts |
| NIGHT and Glacier Drop (phase 2) | Tweag (Modus Create) | August 2025 | night-token-distribution |
Verify a report
Check a downloaded report against its SHA-256 checksum:
sha256sum 2025-12-19-least-authority-ledger-final.pdf
| Report | SHA-256 |
|---|---|
2025-12-19-least-authority-ledger-final.pdf | 336968cfff75a8e671240ead83def97fcbf92d8e2743e1b5a4cdd08653f6b2fb |
2026-03-11-least-authority-midnight-js-final.pdf | 4ef32c4a6bf58d9e0c562d486a266845987b3f6d32d695f807ce853f3fc347ec |
2026-02-23-least-authority-sha3-circuits-final.pdf | 833f0564367c8100fff408a75ebe4249ad242182fce6abc0bbd38a7d0a8933ac |
2025-04-11-zksecurity-midnight-circuits-2-final.pdf | 0df089711ea3d066c09ff6a678c3c125aafbb64dc6c913e5e8ba729285801228 |