Brink, a Bitcoin-development organization, has recently been relaunched. funded the first ever independent security audit Third-party analysis of Bitcoin Core (complete report available) here). The audit was conducted by Quarkslab, a software security firm, with the help of the Open Source Technology Improvement Fund (OSTIF) and collaboration with Bitcoin Core developers Niklas Gögge, from Brink, and Antoine Poinsot, from Chaincode Labs.
The security audit is a major milestone in the history of Bitcoin core, which has been the client most commonly used and referred to by the Bitcoin protocol and network.
The following are some of the ways to get in touch with us Bitcoin Core In the last couple of years, security policies and procedures have been continuously revised and hardened to become thorough and comprehensive. A third-party audit performed by someone who is an expert on security reviews has set a high bar. The bar was raised.
This audit included manual code reviews, automated static and dynamic analyses, as well as advanced fuzz tests, where input is automatically generated and then run through various code paths to try and reveal any unexpected or harmful behavior.
The audit found no critical, medium, or high severity bugs. Bitcoin Core classified thirteen issues as not being vulnerabilities, but two of them were low-severity. vulnerability classification criteria.
This process resulted also in improved testing infrastructure in Bitcoin Core, such as new fuzz-testing infrastructures for scenarios involving block connections and chain reorganization, improvements to the file system that speed up fuzz tests and improve them in general, utilities for performing back sliding code testing and suggestions on how code can be read more easily by reviewers and developers.
Some of these improvements have already been implemented and are under review for possible integration into Bitcoin Core.
This independent audit has confirmed that Bitcoin Core’s recent improvements in terms of security policies, testing and quality reviews have made a significant impact on the project.
“This article is not financial advice.”
“Always do your own research before making any type of investment.”
“ItsDailyCrypto is not responsible for any activities you perform outside ItsDailyCrypto.”
Source: bitcoinmagazine.com
