Grant Application: Security Audit of Zaino

Hey everyone! :waving_hand: Excited to share that we’ve submitted a ZCG grant application proposing an independent security audit of Zaino, the Rust-based indexer built by Zingolabs as part of the Z3 stack.

Zaino sits between Zebra/zcashd and every wallet/light client that depends on it, but hasn’t yet had a published third-party security audit, unlike zcashd, Zebra, and librustzcash, which have a long audit history (NCC Group, Least Authority, TrailOfBits, and others).

Full application here:

Grant Application - Security Audit of Zaino · Issue #407 · ZcashCommunityGrants/zcashcommunitygrants · GitHub.

Would love to hear any thoughts from the community or the Zaino/Zingolabs team; happy to answer questions!

2 Likes

Thanks for submitting your grant request to ZCG. Once the committee completed its review and the community had time to comment on the forum, the decision was made not to proceed with this proposal. We’re grateful for your contribution and encourage continued engagement with Zcash. Meeting minutes.