/audits

Public Audits in the NEAR Ecosystem

NEAR Audit Database

Public Audits in the NEAR Ecosystem. Here is google sheets version for easier edit https://docs.google.com/spreadsheets/d/1YrQNaWV6JB6vM5iDuv9MmwHD5RbnmFlICA0UCdgWoco/edit#gid=0

🔑 Key

  • ✅ audit public, doesn’t mean no vulnerabilities, and doesn't mean audit has been checked or its been by firm listed below, just that it exists. This also doesn’t mean that an audit was done for all smart contract and dApp functionality.
  • 📦 audit may exist somewhere but private. Or publicly mentioned an audit but the audit isnt public.
  • 👀 = looking for an audit make a PR
  • 🟡 = getting an audit
  • 😡 = as of last talking to team no audit

Project Audit stage Audited By Date Report Type
Aurora Staking Contracts ✅ Blaize Security June 7, 2022 Click here DeFI
Aurora Staking Contracts ✅ Hacken June 8, 2022 Click here DeFI
Naramunz ✅ Hacken Jul 5, 2022 Click here Near FT token
Vote Token & Election Contract Aurora ✅ Hacken January 18, 2023 Click here Contracts
NEAR Plugins ✅ Hacken March 27, 2023 Click here Contracts
NEAR Blockchain Protocol ✅ Hacken Dec 11, 2023 Click here L1 Protocol
NEAR Plugins ✅ AuditOne March 14, 2023 Click here Contracts
Aurora Fast Bridge ✅ AuditOne May 9, 2023 Click here Contracts
Aurora Staking Farm + Factory ✅ Halborn March 25, 2022 Click here DeFi
Octopus Network - App Chain Anchor ✅ Blocksec July 10, 2022 Click here Infrastructure
Rainbow Bridge Smart Contract ✅ Sigma Prime June 1, 2022 Click here
Rainbow Bridge Smart Contract ✅ Blaize Security October 5, 2022 Click here Infrastructure
Proximity Labs - NearETH - NETH ✅ OtterSec May 06, 2022 Click here Infrastructure
AstroDAO 👀 DAO
Keypom 👀 Infrastructure
Tonic ✅ Veridise February 13 2023 Click Here DeFi
v2.ref-finance.near
v2.ref-farming.near (1)		 ✅ Jita March 2022 Click here All ref audits here DeFi
v2.ref-finance.near
v2.ref-farming.near (2)		 ✅ Jita May 2022 Click here DeFi
Ref DCL Contracts (1) ✅ Blocksec Dec 9, 2022 Click here DeFi
Ref DCL Contracts (2) ✅ Blocksec Feb 10, 2023 Click here DeFi
xRef Token Contract ✅ Blocksec October 12, 2022 Click here DeFi
Ref Exchange (1) ✅ Blocksec Nov 2, 2022 Click here DeFi
Ref Exchange (2) ✅ Blocksec Nov 20, 2022 Click here DeFi
Ref-ve ✅ Blocksec July 14, 2022 Click here DeFi
Ref-Boost-Farm ✅ Blocksec July 26, 2022 Click here DeFi
Pembrock ✅ BlockSec June 27th, 2021 Click here DeFi
Stader ✅ OtterSec September 09, 2022 Click here DeFi
Metapool ✅ Blocksec March 1, 2022 Click here DeFi
Metapool - AuroraStNEAR ✅ BlockSec March 20th, 2022 Click here DeFi
Orderly 📦 Halborn 📦 DeFi
Orderly ✅ Certik Sep 16th, 2022 Click here DeFi
Spin Finance ✅ BlockApex July 19, 2022 Click here DeFi
Burrow Finance ✅ BlockSec Feb 14, 2022 Click here DeFi
Burrow Finance ✅ BlockSec March 19, 2022 Click here DeFi
Veax ✅ H-X Technologies January 25, 2023 Click here DeFi
JumpDeFi 👀 DeFi
Jumbo.Exchange 👀 DeFi
HideYourCash 😡 DeFi
Sender Wallet - Android ✅ Slowmist July 15, 2022 Click here Wallet
Sender Wallet - iOS ✅ Slowmist July 15, 2022 Click here Wallet
Sender Wallet - Browser Extension ✅ Slowmist July 6, 2022 Click here Wallet
Meteor Wallet 👀 Wallet
HERE Wallet Liquid Staking ✅ OtterSec January 6, 2023 Click here Wallet
MyNEARWallet 👀 Wallet
Wallet.near.org Wallet
NEARFi Wallet 👀 Wallet
Salmon Wallet 😡 Wallet
Welldone Wallet 👀 Wallet
Nightly Wallet - NEAR 👀 Wallet
Opto Wallet - NEAR Wallet
Math Wallet - NEAR 👀 Wallet
Narwallets 👀 Wallet
Coin98 Wallet 👀 Wallet
Metamask Snaps (NEAR Snap) 😡 Wallet
Finer Wallet 👀 Wallet
xDeFI Wallet 👀 Wallet
FewNFar 👀 NFT
Mintbase ✅ Ottersec March 29, 2023 Click here NFT
Paras.id 👀 NFT
Tradeport.xyz 👀 NFT
Namesky ✅ Pessimistic Aril 26, 2023 Click here NFT
PlayEmber 👀 Gaming
Wormhole ✅ OtterSec August 26, 2022 Click here Bridge
Allbridge 👀 Bridge
XP.network 👀 Bridge
social.near 😡 dApp
Roketo Payment Streams 👀
Tenamint NFT
Bodega Marketplace
LiNEAR Protocol ✅ BlockSec April 1, 2022 Click here DeFi
Phoenix Bonds ✅ BlockSec January 12, 2023 Click here DeFi

🪲 Bug Bounty Programs

Protocol Bug Bounty Page
NEAR General Bug Bounty Program For Near - HackenProof
Aurora Buy Bounty Program for Aurora - HackenProof
Ref finance Bug Bounty Ref Finance - ImmuneFi
SweatCoin Sweat Economy Bug Bounties - Immunefi
Stader on NEAR Stader for NEAR Bug Bounties - Immunefi

Known NEAR Auditing Firms

Firms that are known for auditing NEAR dApps & Contracts

Firm Public Audits
Veridise Click here
Ottersec Click here
FYEO
Kudelski
Sigma Prime Click here
Chain Security
Block Security
Halborn Click here
Hacken Click here
Guvenkaya Click here

To add into table

Firms That Audits Have Failed to Detect Critical Vulnerabilities

dont slip up and get added to this list

Exploits

Slip Ups

Description Link
Near Protocol Discloses Wallet Breach That May Have Exposed Private Keys Decrypt

To-do

  • Finish finding all audits
  • Backup all the audits on Arweave + IPFS and archive all instances of audit on wayback machine
  • Work with ecosystem aggregator like NEAR Horizon to reference audits
  • Compile all the exploits
  • Let projects and NEAR Founders know to make a PR
  • Contact all projects without audits and let them know they can’t be lacking in these streets like that
  • Publish this on BOS

Contribution Guidelines

To learn how to contribute to the public repo go to Contribution Guidelines