> For the complete documentation index, see [llms.txt](https://docs.midnight.network/llms.txt)

# Security audits

The Midnight Foundation commissions independent security audits of Midnight components. This page lists the published reports.

Each report appears here exactly as the auditor delivered it. The status of each finding reflects the auditor's verification at the code revision named in the report. Later releases may have changed the code.

To report a security vulnerability, follow the [Midnight Foundation security policy](https://github.com/midnightntwrk/midnight-docs/blob/main/SECURITY.md). Use GitHub private vulnerability reporting, or email <security@midnight.foundation>. Do not open a public issue.

## Audit reports[​](#audit-reports "Direct link to Audit reports")

| Component                                                        | Auditor         | Report date      | Audited code                                                                                                                                                                                                                                                                                                                  | Report                                                                                                |
| ---------------------------------------------------------------- | --------------- | ---------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------- |
| Ledger (including Zswap and DUST)                                | Least Authority | 19 December 2025 | [midnight-ledger](https://github.com/midnightntwrk/midnight-ledger) at [`854e7e7`](https://github.com/midnightntwrk/midnight-ledger/tree/854e7e7ccb3723d0a0584e876942b9a16ca53311), fixes verified at [`0fff805`](https://github.com/midnightntwrk/midnight-ledger/tree/0fff8058ff6bb75ecb3299e561279cb63d6c8516)             | [PDF](https://docs.midnight.network/files/audits/2025-12-19-least-authority-ledger-final.pdf)         |
| Midnight.js                                                      | Least Authority | 11 March 2026    | [midnight-js](https://github.com/midnightntwrk/midnight-js) at [`4255f7b`](https://github.com/midnightntwrk/midnight-js/tree/4255f7bd0b3eb21449598049456d00976f7bbe86), fixes verified at [`bdea445`](https://github.com/midnightntwrk/midnight-js/tree/bdea44567255e618de1af912b1a1262c803ca4d1)                             | [PDF](https://docs.midnight.network/files/audits/2026-03-11-least-authority-midnight-js-final.pdf)    |
| SHA-3 (Keccak) circuits                                          | Least Authority | 23 February 2026 | [sha3-circuit](https://github.com/alexandroszacharakis8/sha3-circuit) at [`d75f363`](https://github.com/alexandroszacharakis8/sha3-circuit/tree/d75f363aa1f8e43031823cd17271e091d344a5ef), fixes verified at [`12addf9`](https://github.com/alexandroszacharakis8/sha3-circuit/tree/12addf950bb17ee7a76389c60e5f61113733fdf2) | [PDF](https://docs.midnight.network/files/audits/2026-02-23-least-authority-sha3-circuits-final.pdf)  |
| Midnight circuits: ZkStdLib, Poseidon, BigUint, JSON, and Base64 | zkSecurity      | 11 April 2025    | [midnight-zk](https://github.com/midnightntwrk/midnight-zk) at [`6e1454e`](https://github.com/midnightntwrk/midnight-zk/tree/6e1454ef5c5204bd4705a90b3353daabd5f87428)                                                                                                                                                        | [PDF](https://docs.midnight.network/files/audits/2025-04-11-zksecurity-midnight-circuits-2-final.pdf) |

## Reports published elsewhere[​](#reports-published-elsewhere "Direct link to Reports published elsewhere")

Each of these reports lives in the repository of the code it audits.

| Component                                 | Auditor              | Report date    | Report                                                                                                                                                                                               |
| ----------------------------------------- | -------------------- | -------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Upgradable contracts on Cardano (Reserve) | TxPipe               | 8 January 2026 | [midnight-reserve-contracts](https://github.com/midnightntwrk/midnight-reserve-contracts/blob/main/01%20FINAL%20TxPipe%20-%20Upgradable%20Contracts%20on%20Cardano%20Audit%2008.01.2026%20\(1\).pdf) |
| NIGHT and Glacier Drop (phase 2)          | Tweag (Modus Create) | August 2025    | [night-token-distribution](https://github.com/midnightntwrk/night-token-distribution/tree/main/glacier-drop-audit)                                                                                   |

## Verify a report[​](#verify-a-report "Direct link to Verify a report")

Check a downloaded report against its SHA-256 checksum:

```
sha256sum 2025-12-19-least-authority-ledger-final.pdf
```

| Report                                                | SHA-256                                                            |
| ----------------------------------------------------- | ------------------------------------------------------------------ |
| `2025-12-19-least-authority-ledger-final.pdf`         | `336968cfff75a8e671240ead83def97fcbf92d8e2743e1b5a4cdd08653f6b2fb` |
| `2026-03-11-least-authority-midnight-js-final.pdf`    | `4ef32c4a6bf58d9e0c562d486a266845987b3f6d32d695f807ce853f3fc347ec` |
| `2026-02-23-least-authority-sha3-circuits-final.pdf`  | `833f0564367c8100fff408a75ebe4249ad242182fce6abc0bbd38a7d0a8933ac` |
| `2025-04-11-zksecurity-midnight-circuits-2-final.pdf` | `0df089711ea3d066c09ff6a678c3c125aafbb64dc6c913e5e8ba729285801228` |