Lelantus Spark Code Audit Completed

HashCloak has concluded the Lelantus Spark Audit

HashCloak has just concluded the audit of Firo’s Lelantus Spark implementation!

The audit ran from 24 October 2022 until 28 November 2022, with an initial report delivered on 9 December 2022. The final report taking note of all fixes done by the core team, was delivered on 19 December 2022 and is available here.

The audit found no critical or high severity issues. The report's other findings have all been resolved in the updated codebase. A copy of the report is available here.

We would like to thank HashCloak and Cypher Stack for their fantastic work on the audit and MAGIC Grants for assisting with the milestone payments to HashCloak.

This audit would not have been possible without the Firo community's support, which fully funded the audit costing USD 80,000. We would like to give a special shout-out to Rasikh Morani from Arcadia Group and the Community Fund Committee for their generous contributions towards the audit.

Spark is the culmination of years of work of Firo from our roots with Zerocoin, Sigma and Lelantus. Our prior research removed trusted setup and the requirement of fixed denominations. The introduction of Spark heralds in fully confidential transactions, and powerful and flexible Spark addresses designed to protect recipient privacy. These addresses are also feature-packed with support for efficient multi-sig, incoming and outgoing view keys, diversified addressing and the ability to offload chain scanning and balance computation without giving up spend authority. Spark is also built to last, with a modular structure allowing components to be upgraded as the technology improves.

Lelantus Spark is live on devnet as we further clean up the code and fix bugs. We expect to launch testnet shortly in January.