Skip to main content
The V5.1 internal audit catalogued 5 critical, 14 high-severity, and a long tail of medium / low findings against the protocol. Verdict: NEEDS-FIXES at commit 6a3ce42. Most of the high-severity findings have been fixed in dedicated branches. The mainnet rollout is gated on completion of the remaining items.

​
Status (cross-branch)

SeverityFoundFixedIn-flight
Critical541 (C-X — see below)
High1468
Medium~2012rest
Low / preventive~532
A live status table is maintained at org-lumina/LUMINA-PROTOCOL/AUDIT_STATUS.md in the protocol repo (when present).

​
Independent audit

An independent audit by a third-party firm is planned before mainnet. The internal audit is what gates the internal sign-off for production deploys.

​
Reporting a vulnerability

If you find something we haven’t, please don’t open a public issue. Email security@lumina-org.com with reproduction steps. Bounties are scoped to Base mainnet contracts only (sandbox / Sepolia mocks excluded).