Varint decoding advisory
Advisory on varint decoding that accepts unbounded input.
Other
Orijtech Security
Audits
Core contributors to the Cosmos ecosystem and the Cosmos SDK, and even more so to the Go programming language that most of Cosmos is written in.
Earlybird audit v1.0.0
Audit of American Express's Earlybird security scanner.
Other
Evmos Audit v1.0.0
Audit with performance focused improvements for Evmos.
Other
CosmWasm Audit v1.0.0
Efficient, safe WebAssembly smart contracts in a chain agnostic way.
Other
Chainguard Cosmos supply chain audit v1
Supply chain security audit of the Cosmos ecosystem for Chainguard.
Other
Ignite security incident response
Credentials for *.ignite.com and *.tendermint.com exposed by a leaked public Docker image.
Other