# Security

At Alpen Labs, we prioritize the security of our users and the integrity of the Bitcoin ecosystem. We engage with top-tier security firms to rigorously audit our circuits, bridge contracts, and core protocol logic.

{% hint style="info" %}
Current Security Status: The mainnet v1 contracts are currently under active audit. The reports listed below cover the Alpha/Testnet implementations.
{% endhint %}

### Audit Log

We maintain a transparent record of all third-party assessments.

<table><thead><tr><th width="152.953125">Report Date</th><th width="119.12890625">Auditor</th><th width="370.65234375">Scope/Project</th><th>Report Link</th></tr></thead><tbody><tr><td>2025-8</td><td>Least Authority</td><td>Orchestration Layer</td><td><a href="https://drive.google.com/file/d/1VEPg6Zwusd1Z4wTcGlINkX8RNt-vI2DN/view?usp=sharing">Link</a></td></tr><tr><td>2025-11</td><td>Halborn</td><td>Secret Service (strata-bridge)</td><td><a href="https://drive.google.com/file/d/19-1Q9E9EmgnYRNxfzqOovUgWgW9y-Z1F/view?usp=sharing">Link</a></td></tr><tr><td>2025-11</td><td>Zellic</td><td>DashBoard Front End and Backend</td><td><a href="https://drive.google.com/file/d/1rEc3khhwWzaGCl1l9me1FCUmuZd4R3Nt/view?usp=drive_link">Link</a></td></tr><tr><td>2025-11</td><td>Zellic</td><td>Faucet Front End and API</td><td><a href="https://drive.google.com/file/d/1JLx7g2M1XZ4-Tbn9q8z_qS8AU63tf1Wq/view?usp=drive_link">Link</a></td></tr><tr><td>2025-12</td><td>Zellic</td><td>P2P</td><td><a href="https://drive.google.com/file/d/152pZFSE_b-WMANy3CAR0ivUc4s6bOHab/view?usp=sharing">Link</a></td></tr><tr><td>2025-12</td><td>Zenith</td><td>g16 and CKT</td><td><a href="https://github.com/zenith-security/reports/blob/main/reports/Alpen%20Audit%20Report%20-%20Zenith%20Audit%20Report.pdf">Link</a></td></tr><tr><td></td><td></td><td></td><td></td></tr></tbody></table>

### Bug Bounty Program

We run an active Immunefi bug bounty program for critical vulnerabilities.

[Report a vulnerability on Immunefi](https://immunefi.com/bug-bounty/alpen-labs/information/)

### Responsible Disclosure

We follow the official security.txt standard (RFC 9116). [View our security.txt](https://www.alpenlabs.io/.well-known/security.txt)

Preferred contact channels:

1. Open an issue on GitHub: <https://github.com/alpenlabs/alpen/issues>
2. Email: <security@alpenlabs.io>&#x20;