Privacy laws create rights and obligations. Encryption makes guarantees. The difference between the two just got a lot less abstract. As of June 2026, the U.S. Supreme Court cast doubt on one of the pillars holding up the EU–U.S. Data Privacy Framework (DPF). Here is why that matters and why
Espresso Systems requested that we perform a security audit of its Batch Authenticator Contract, which is written in Solidity. Our final audit report was completed on August 13, 2026. To read the full report, including our findings, click here: Report
Espresso Systems requested that Least Authority perform a security audit of its derivation pipeline changes for the OP Stack (Go and Rust). Our final audit report was completed on August 11, 2026. To read the full report, including our findings, click here: Report
Aligned Layer requested that Least Authority perform a security audit of its ClaimableAirdrop.sol contract. ClaimableAirdrop enables Aligned Layer to distribute tokens to early users in a gas-efficient manner by requiring users to provide a Merkle proof when claiming tokens. Our final audit report was completed on July 21, 2026. To
MAGIC Grants requested that Least Authority perform a security audit of the implementation of Serai’s Distributed Key Generation (DKG), which is premised on Publicly Verifiable Secret Sharing. Serai is a decentralized exchange (DEX) that allows users to trade assets across heterogeneous blockchains through a liquidity-pool (AMM) trading model. Our final
Sovright requested that Least Authority perform a security audit of Argos, a recovery workspace for legacy ZecWallet Lite seeds. The application consists of a Rust-based core library, a command-line interface, and a graphical user interface built using Tauri. Its primary function is to scan the Zcash blockchain and perform large-scale
Least Authority recently conducted an AI-assisted security audit across several security-critical repositories in the Zcash ecosystem at the request of Zcash Community Grants (ZCG). The goal of this work was to explore how AI-assisted workflows can support security review at scale while still relying on careful human verification before any
Security audits, managed crowdsourced security platforms, and open bug bounty programs are often treated as interchangeable approaches to security testing. In practice, they serve different roles. While crowdsourced approaches and bug bounty programs are effective at uncovering vulnerabilities in deployed systems, both remain inherently exploratory rather than systematic. Security audits