Security.
Top priority

Halborn conducted a security audit on Sui with the goal of ensuring it operated as intended and identifying potential security issues with the codebase.

Zellic reviewed Move and Sui Security Assessment’s code for security vulnerabilities, design issues, and general weaknesses in security posture.

Halborn conducted a security audit of Sui’s smart contracts to ensure they operate as intended and to identify any potential security issues.

Zellic reviewed DeepBook’s code for security vulnerabilities, design issues, and general weakness in security posture.

Halborn conducted a security audit of the Groth16 verifier API to ensure the smart contract functions as intended and identify potential security issues.

Halborn conducted a security audit of the Sui Typescript SDK in order to improve the quality of the systems reviewed and to target sufficient remediation to help protect users.

Halborn conducted a DoS security audit to identify if there was any risk of DoS conditions on nodes that may result from custom transactions and signatures.

Halborn conducted a security audit on the JSON-RPC API.

OtterSec performed an assessment of sui-verifier, sui-framework, sui-governance, sui-json-rpc, sui-adapter, collectibe, kiosk, suifrens, suins and sui.id programs.

FYEO conducted a security assessment of sui-system, the staking code in Move.

Common Prefix conducted an audit of the Elliptic Curve Verifiable Random Function and Ristretto255 implementations within Sui's fastcrypto library.

Common Prefix conducted an audit of the Elliptic Curve Digital Signature Algorithm (ECDSA) sec256k1 implementation within Sui's fastcrypto library.

Common Prefix conducted an audit of the BLS12381 implementation within Sui's fastcrypto library.

Common Prefix conducted an audit of the ECDSA implementation within Sui's fastcrypto library.

Blaize.Security examined the security of the Sui TypeScript SDK that provides multisig functionality.

zkSecurity conducted an audit of Sui's zkLogin primitive, consisting of Circom circuits, typescript files, and ceremony code on top of snarkjs..

Blaize.Security examined the security of the Sui multisig rust implementation.

Critical Section Security audited new features on Sui Wallet related to zkLogin.