Skip to main content
The audit reports for ibc-go are listed alongside every other IBC audit, so that the protocol, Go, Solidity, and Solana reviews stay in one place rather than drifting apart across sections.

Security audits

Every independent audit of IBC, across the protocol and its Go, Solidity, and Solana implementations.
The Go reports themselves live in cosmos/ibc-go/docs/audits.

Reporting a vulnerability

Report privately through the ibc-go security policy, not as a public issue. Paid disclosures go through the Cosmos bug bounty on Immunefi.