Brink Funds First Third Party Security Audit Of Bitcoin Core By Quarkslab

Brink Funds First Independent Security Audit of Bitcoin Core

Brink, a prominent Bitcoin development organization, recently sponsored the first-ever independent security audit of Bitcoin Core conducted by a third party. The audit, carried out by Quarkslab, a reputable software security firm, in collaboration with the Open Source Technology Improvement Fund (OSTIF) and Bitcoin Core developers Niklas Gögge and Antoine Poinsot, marks a significant milestone in the development history of Bitcoin Core.

Bitcoin Core, as the most widely adopted and reference client of the Bitcoin network and protocol, has seen continuous improvement in security policies and practices over the years. However, the external audit by a specialized third party sets a new standard for security evaluation, which was successfully met.

The audit encompassed manual code review, static and dynamic analysis using automated tools, and advanced fuzz testing to uncover any potential vulnerabilities. The outcome of the audit revealed no critical, high, or medium-severity bugs. Only two low-severity issues were identified, along with thirteen other issues that did not meet Bitcoin Core’s vulnerability classification criteria.

Furthermore, the audit process led to enhancements in Bitcoin Core’s testing infrastructure, such as the introduction of new fuzz testing infrastructure for block connection and chain reorganization scenarios, improvements in file system performance for fuzz testing, and utilities for testing code performance. These improvements are currently in progress and will be integrated into the Bitcoin Core repository.

The results of the independent security audit reaffirm the positive impact of Bitcoin Core’s ongoing efforts to enhance security policies, testing procedures, and overall code quality. The project continues to prioritize security and quality assurance to ensure the reliability and integrity of the Bitcoin network.