Grant Application: Security Audit of Zaino

Hey everyone! :waving_hand: Excited to share that we’ve submitted a ZCG grant application proposing an independent security audit of Zaino, the Rust-based indexer built by Zingolabs as part of the Z3 stack.

Zaino sits between Zebra/zcashd and every wallet/light client that depends on it, but hasn’t yet had a published third-party security audit, unlike zcashd, Zebra, and librustzcash, which have a long audit history (NCC Group, Least Authority, TrailOfBits, and others).

Full application here:

Grant Application - Security Audit of Zaino · Issue #407 · ZcashCommunityGrants/zcashcommunitygrants · GitHub.

Would love to hear any thoughts from the community or the Zaino/Zingolabs team; happy to answer questions!

2 Likes