Grin wallet Grin++ security audit results released, most of the issues found in the audit have been fixed

According to BlockBeats, the software development and smart contract auditing company SmartDec released the security audit results of the Grin++ wallet. SmartDec said that considering the security of the Grin++ project, its mission is to discover and describe security issues in the platform code base.

The first phase of the SmartDec audit revealed a number of issues of varying severity, which have been addressed in conjunction with the developers, so that in the latest version of the code they have fixed most of the issues found during the audit. For issues that were not resolved, the developers provided comments that can be found in the report.

SmartDec said that auditing does not guarantee the security of the code. One audit is not enough. SmartDec recommends several independent audits and a public bug bounty program to ensure the security of the code base. In addition, the audit is not an investment advice.

SmartDec considered the Mimblewimble protocol specification and Grin++ code in its analysis, and the submitted version is a04fe64fd8912bb3d6831713e01591b5db401a15. After the first phase of the audit, many issues were found. After that, the code base was completely re-analyzed. After the final audit, some fixes were applied and the code was updated to the latest version at 9b00b73316cbee7726524b1d862610ad33a003aa.

Original audit report: https://grinplusplus.github.io/SmartDec%20Grin%2B%2B%20Security%20Audit.pdf

BlockBeats reminds that according to the document "Risk Warning on Preventing Illegal Fund Raising in the Name of "Virtual Currency" and "Blockchain"" issued by the China Banking and Insurance Regulatory Commission and other five departments in August 2018, the general public is requested to look at blockchain rationally, not blindly believe in the exaggerated promises, establish correct monetary concepts and investment ideas, and effectively enhance risk awareness; any clues of illegal and criminal activities discovered can be actively reported to the relevant departments.