what they reviewed ↓
- Escrow factory & instance contracts
- Atomic swap state machine
- Fee distribution logic
- Refund & timeout paths
Middn's smart contracts and ZK circuits have been independently audited by the best in the industry. Every report is public. Every line of code is open-source. Read it yourself.
Trail of Bits and Halborn — two of the most respected security firms in crypto — have reviewed every contract and circuit. A $250k bug bounty is live at Code4rena.
We pay serious money for serious findings. The bigger the impact, the bigger the bounty. No legal threats, no NDAs, no gotchas.
Find a critical bug in our contracts or circuits and we'll pay you generously. The Code4rena contest is open through June 15, with a dedicated rewards table for severity tiers.
Submit a finding →Every line of code that touches user funds goes through the same gauntlet. No exceptions, not even for hotfixes.
Every contract change runs through Echidna + Foundry fuzzers for 200,000+ iterations daily. Property-based tests catch invariant violations before code review.
Two engineers must sign off. No solo merges, ever. We use Slither + Mythril static analysis on every PR. Anything touching state requires a Certora formal spec.
Before any production deployment, the change goes to Trail of Bits or Halborn for review. We don't ship to mainnet until the report comes back clean.
Once deployed, the code is open to public review on Code4rena and Immunefi. Wardens get up to $250k for critical findings. Lower tiers paid in stablecoins, in 7 days.
Real-time alerting on every contract via Forta + Tenderly. Anomaly detection, large transfers, unexpected state. Anything weird wakes someone up at 3am.
Want to dig deeper? Read the full whitepaper, run our circuits yourself, or reach out to our security team directly.