Anza Technology has requested that Least Authority perform a security audit of the BLS Signatures Crate. For this audit, we performed research, investigation, and review of the solana_bls_signatures and solana_bls12_381_syscall crates followed by issue reporting, along with mitigation and remediation instructions as outlined in this report. Our final audit report
What if Privacy Were the Default? Most digital services still require accounts, personal data, and behavioral tracking permissions, even for simple actions. It’s often assumed that convenience depends on identity. But that assumption is outdated. Tools like anonymous credentials make it possible to build services where an identifying profile is
Lightec requested that Least Authority review several components of the zkBTC protocol, which is a bridge between Bitcoin and Ethereum, using techniques from zero-knowledge proofs. The bridge allows a Bitcoin user to mint a zkBTC token, use this token in the Ethereum ecosystem, and eventually redeem the Bitcoin from the
We performed a second security audit of World’s MPC Circuit within the Mobile IrisCode Self-Custody Upgrade project, which allows users to self-host biometric data on their personal device while supporting high-integrity authentication for the World ID service. Our final audit report was completed on March 7, 2025. To read the
Our team performed a review of the recent changes to World‘s secure multi-party computation protocol V2 (SMPC Protocol), which is used to match a given iris against a database of iris shares. In this third review, we audited the changes implemented in the second version of the protocol since our
Warlock has requested that Least Authority perform a security audit of Sylow and SolBLS. Sylow is a Rust library for elliptic curve cryptography, specifically tailored for the BN254 curve, and SolBLS is a Solidity library optimized for on-chain BLS signature verification. Our final audit report was completed on January 6,
We performed a security audit of World‘s Mobile IrisCode Self-Custody Upgrade project, which allows users to self-host biometric data on their personal device while supporting authentication for the World ID service. Our final audit report was completed on January 2, 2025. To read the full report, including our findings, click
Consensys Software, Inc. requested that Least Authority perform a security audit of Linea zkEVM (crypto-beta-v1) and cryptography libraries. Linea implements zkEVM based on the Wizard protocol and the gnark library. Our final audit report was completed on November 26, 2024. To read the full report, including our findings, click here: