Overview

ChainSafe has requested that Least Authority perform a security audit of their Lodestar utility libraries. Lodestar is an Ethereum 2.0 implementation of the Beacon Chain.

The following utility libraries are considered in scope:

• Persistent Merkle Tree: https://github.com/chainsafe/persistent-merkle-tree
• BLS key derivation and hd key utilities: https://github.com/ChainSafe/bls-hd-key
• Key management for BLS curves: https://github.com/ChainSafe/bls-keygen
• BLS key store: github.com/chainsafe/bls-keygen
• Typescript types for Ethereum 2.0 data structures: https://github.com/ChainSafe/lodestar/tree/master/packages/lodestar-types
• Utility methods used throughout Lodestar modules: https://github.com/ChainSafe/lodestar/tree/master/packages/lodestar-utils
• Beacon Chain configuration: https://github.com/ChainSafe/lodestar/tree/master/packages/lodestar-config

Our final audit report was completed on March 23, 2020.