# Security

At Alpen Labs, we prioritize the security of our users and the integrity of the Bitcoin ecosystem. We engage with top-tier security firms to rigorously audit our circuits, bridge contracts, and core protocol logic.

{% hint style="info" %}
Current Security Status: The mainnet v1 contracts are currently under active audit. The reports listed below cover the Alpha/Testnet implementations.
{% endhint %}

### Audit Log

We maintain a transparent record of all third-party assessments.

<table><thead><tr><th width="152.953125">Report Date</th><th width="119.12890625">Auditor</th><th width="370.65234375">Scope/Project</th><th>Report Link</th></tr></thead><tbody><tr><td>2025-8</td><td>Least Authority</td><td>Orchestration Layer</td><td><a href="https://drive.google.com/file/d/1VEPg6Zwusd1Z4wTcGlINkX8RNt-vI2DN/view?usp=sharing">Link</a></td></tr><tr><td>2025-11</td><td>Halborn</td><td>Secret Service (strata-bridge)</td><td><a href="https://drive.google.com/file/d/19-1Q9E9EmgnYRNxfzqOovUgWgW9y-Z1F/view?usp=sharing">Link</a></td></tr><tr><td>2025-11</td><td>Zellic</td><td>DashBoard Front End and Backend</td><td><a href="https://drive.google.com/file/d/1rEc3khhwWzaGCl1l9me1FCUmuZd4R3Nt/view?usp=drive_link">Link</a></td></tr><tr><td>2025-11</td><td>Zellic</td><td>Faucet Front End and API</td><td><a href="https://drive.google.com/file/d/1JLx7g2M1XZ4-Tbn9q8z_qS8AU63tf1Wq/view?usp=drive_link">Link</a></td></tr><tr><td>2025-12</td><td>Zellic</td><td>P2P</td><td><a href="https://drive.google.com/file/d/152pZFSE_b-WMANy3CAR0ivUc4s6bOHab/view?usp=sharing">Link</a></td></tr><tr><td>2025-12</td><td>Zenith</td><td>g16 and CKT</td><td><a href="https://github.com/zenith-security/reports/blob/main/reports/Alpen%20Audit%20Report%20-%20Zenith%20Audit%20Report.pdf">Link</a></td></tr><tr><td></td><td></td><td></td><td></td></tr></tbody></table>

### Bug Bounty Program

We run an active Immunefi bug bounty program for critical vulnerabilities.

[Report a vulnerability on Immunefi](https://immunefi.com/bug-bounty/alpen-labs/information/)

### Responsible Disclosure

We follow the official security.txt standard (RFC 9116). [View our security.txt](https://www.alpenlabs.io/.well-known/security.txt)

Preferred contact channels:

1. Open an issue on GitHub: <https://github.com/alpenlabs/alpen/issues>
2. Email: <security@alpenlabs.io>&#x20;


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.alpenlabs.io/community/security.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.