As the Zcash ecosystem Security Lead, Zcash Community Grants (ZCG) requested that we perform a security audit of the Kotlin and Swift Payment URI Prototypes, a library for processing Zcash Payment URIs, as defined in ZIP-321. The core functionality of this library, which is implemented in Kotlin for Android and in Swift for
As the Zcash ecosystem Security Lead, Zcash Community Grants (ZCG) requested that we perform a security audit of the FROST server and client components. The frost-crate is an implementation for a threshold Schnorr signatures scheme called FROST (RFC 9591, [KG20]). The frost-demo allows a user to locally mimic a key generation
Threshold signing protocols, like FROST, help to facilitate trust while avoiding the reliance on a centralized authority. They do this by fault-tolerantly distributing information or computation among a cluster of cooperating computers. With the rapid advancement of secure digital systems, threshold cryptography is gaining traction through securing multi-signature wallets, protecting
As the Zcash Ecosystem Security Lead, Zcash Community Grants (ZCG) has requested that Least Authority perform a security audit of the Keystone Hardware Wallet, which supports Zcash users managing their assets. This wallet is designed with several security features, including air-gapped communication, open-source firmware, and a user-friendly interface. Our final
As the Zcash Ecosystem Security Lead, Zcash Community Grants (ZCG) has requested that Least Authority perform a security audit of the OrchardZSA Protocol by the QEDIT team. OrchardZSA is an extension of the Zcash Orchard protocol. Our final audit report was completed on January 3, 2025*. To read the full
As the Zcash Ecosystem Security Lead, Zcash Community Grants (ZCG) has requested Least Authority perform a security audit of the Decred DEX Zcash (ZEC) integration. Decred DEX is a decentralized exchange built by the Decred Project, and the scope of this audit is Zcash’s (ZEC) integration with the exchange. Our
At the end of March 2024, our team at Least Authority was selected for the role of Zcash Ecosystem Security Lead, after responding to a Request for Proposals (RFP) for the role on the Zcash Forums. Per the Zcash Community RFP: “This role is integral in enhancing the security, usability, and
As the Zcash Ecosystem Security Lead and based on direction of the Zcash Community Grants (ZCG) program, Least Authority reviewed the changes made to Zebra that will be introduced in the NU6 network upgrade. Zebra is Zcash’s independent, consensus-compatible implementation of a Zcash node, written in Rust. Our final audit