> For the complete documentation index, see [llms.txt](https://docs.bloxchain.app/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.bloxchain.app/security/audit-status.md).

# Audit status

## Current status

The **Bloxchain Protocol** has completed a **third-party security audit** for the published audited scope. The codebase is **open source (MPL-2.0)** with automated testing (fuzz, invariant, and integration suites).

**bloxchain.app** and **@bloxchain/sdk** are suitable for production use when you deploy audited Protocol releases, complete policy setup, and follow the checklists below. An audit does **not** guarantee absence of risk or cover your custom extensions without separate review.

For a single mainnet checklist across Protocol, app, and SDK, see [Production readiness](/developers/production-readiness.md).

## Published reports

Public write-ups and PDF links are added here as they are released.

| Report              | Scope                                                                                                                                                            | Link                                                                                                                                                                                                                                                                                                                        |
| ------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Nethermind NM\_0828 | [`contracts/core/`](https://github.com/PracticalParticle/Bloxchain-Protocol/tree/99beac2d6e6d7567c23b25cecaf6f4053f31c987/contracts/core/) core protocol library | [Engagement page](https://github.com/PracticalParticle/Bloxchain-Protocol/blob/99beac2d6e6d7567c23b25cecaf6f4053f31c987/audits/nethermind/README.md) · [PDF](https://github.com/PracticalParticle/Bloxchain-Protocol/blob/99beac2d6e6d7567c23b25cecaf6f4053f31c987/audits/nethermind/Nethermind-Bloxchain-Core-NM_0828.pdf) |
| Additional scopes   | If applicable                                                                                                                                                    | *Published here when available*                                                                                                                                                                                                                                                                                             |

Questions about scope or report availability: **<security@particlecs.com>**.

## What this means by surface

| Surface                  | Production guidance                                                                                                                                                                                                                |
| ------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **bloxchain.app**        | Use for production operations when governance, roles, and networks match your risk policy. Complete the [Setup checklist](/platform-bloxchain.app/contracts/checklist.md) before treasury use.                                     |
| **@bloxchain/sdk**       | Pin SDK and contracts to the same [Protocol release](https://github.com/PracticalParticle/Bloxchain-Protocol/releases) you deploy. Validate flows on testnet before mainnet. See [Installation](/getting-started/installation.md). |
| **Contract deployers**   | Deploy from a tagged audited release; review [Security model](/security/security-model.md) and any custom code separately. Start at [Deploy get started](/developers/deployment.md).                                               |
| **Auditors & reviewers** | Use [Security review guide](/security/security-review-guide.md) and the [Protocol repository](https://github.com/PracticalParticle/Bloxchain-Protocol).                                                                            |

## Production checklist

Before mainnet use with material value:

1. Follow [Production readiness](/developers/production-readiness.md) (master checklist).
2. Deploy or import from a **tagged Protocol release** (not an unreviewed fork).
3. Complete [Configure policy](/platform-bloxchain.app/overview-1.md) and the [Setup checklist](/platform-bloxchain.app/contracts/checklist.md).
4. Confirm separation of duties (owner, approvers, broadcasters) for your organization.
5. Read [Security & disclaimers](/security/security-disclaimers.md).

## Limits of the audit

An audit reviews the **audited scope** at a point in time. It does **not** replace:

* Your operational security (keys, runbooks, monitoring)
* Review of **custom contract extensions** beyond the Protocol baseline
* Legal or regulatory classification of your use case

See [Security model](/security/security-model.md) for assumptions and trust boundaries.

## Ongoing assurance

* **Vulnerabilities:** [Report vulnerabilities](/security/report-vulnerabilities.md) — do not use public GitHub issues for security reports.
* **Releases:** [GitHub releases](https://github.com/PracticalParticle/Bloxchain-Protocol/releases) and [Releases and compatibility](/resources/releases.md).
* **Changes:** [Changelog](/resources/changelog.md).


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.bloxchain.app/security/audit-status.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.