Audits, admin powers and risks

Audit status#

No audit yet. Future reports: TBD

Admin powers#

TBD until contracts exist. The current app has no contracts and no admin keys over user funds.

Risks#

• Heuristic errors: clusters and scores can be wrong in both directions.
• Provider outages: when a provider is down, results can be partial. The app says so.
• Simulations mistaken for live results: Privacy Lab, FractalNets and Pool are simulations. Check the badge and watermark.
• Phishing: sites can copy the look of ZK OS. The real app only asks for approvals or transactions inside the Swap program, after you click Swap or Bridge, and only toward the verified 0x AllowanceHolder contract. See Swap and bridge risks.

Security contact and responsible disclosure#

Security contact: TBD

Until a contact is published, please do not disclose issues publicly.