​
Overview

The IBC-Go protocol has undergone multiple comprehensive security audits by leading blockchain security firms. These audits cover various components and features of the IBC protocol, ensuring robust security across all major functionality areas. Each audit provides an independent assessment of code quality, potential vulnerabilities, and architectural design.

​
Available Audit Reports

​
IBC v2 Protocol Audit

Auditor: Collaborative Audit Team Completion Date: April 2025 Pages: 74 Audited Commit: 79218a531e769bb5c29022d50ef017bd81e4bd9b Scope: IBC v2 protocol implementation This comprehensive audit covers the IBC v2 protocol implementation that simplifies the IBC protocol by removing channel and connection handshakes, minimizing the application interface, and enabling connectivity with new domains like Ethereum while maintaining backward compatibility with existing IBC channels.

IBC v2 Protocol Audit Report

Complete security assessment of IBC v2 protocol implementation (74 pages)

​
ICS-20 Token Transfer v2

Auditor: Atredis Partners Completion Date: September 2024 Pages: 41 Features Covered:
  • Multi-denomination support
  • Memo field enhancements
  • Forwarding middleware
  • Path unwinding capabilities

ICS-20 v2 Audit Report

Security assessment of ICS-20 v2 token transfer features (41 pages)

​
Channel Upgrades

Auditor: Atredis Partners Completion Date: March 2024 Version: Report v1.1 Pages: 38 Features Covered:
  • Channel upgrade handshakes
  • Timeout mechanisms
  • State machine verification
  • Upgrade cancellation logic

Channel Upgrades Audit Report

Assessment of IBC channel upgrade functionality (38 pages)

​
08-WASM Light Client

Multiple Audits Available:
Halborn Security Audit
Auditor: Halborn Completion Date: February 2023 Pages: 55 Focus: WASM light client implementation security

WASM Client Halborn Audit

Halborn security assessment of WASM light client (55 pages)
Ethan Frey Review
Reviewer: Ethan Frey Type: Technical Review Focus: WASM client architecture and implementation

WASM Client Technical Review

Technical review of WASM client implementation

​
Interchain Accounts (ICS-27)

Auditor: Trail of Bits Pages: 42 Features Covered:
  • Controller and host chain implementations
  • Authentication mechanisms
  • Message routing and execution
  • Security boundaries and access controls

Interchain Accounts Audit

Trail of Bits assessment of Interchain Accounts (42 pages)

​
Key Security Areas

These audits collectively cover:

​
Protocol Security

  • Core IBC protocol mechanics
  • Handshake protocols and state machines
  • Timeout and error handling
  • Proof verification systems

​
Feature Security

  • Token transfer mechanisms
  • Cross-chain account control
  • Light client implementations
  • Channel upgrade procedures

​
Implementation Security

  • Memory safety and resource management
  • Cryptographic operations
  • State consistency guarantees
  • Access control and permissions

​
Recommendations for Developers

When building with IBC-Go:
  1. Review Relevant Audits: Consult the audit reports for features you’re implementing
  2. Follow Security Patterns: Adopt the security practices recommended in the audits
  3. Test Thoroughly: Include security testing based on audit findings
  4. Stay Updated: Monitor for security advisories and updates
  5. Report Vulnerabilities: Follow responsible disclosure practices

​
Continuous Security

The IBC-Go team maintains an ongoing commitment to security through:
  • Regular audits of new features and major releases
  • Rapid response to security disclosures
  • Transparent communication via security advisories
  • Active collaboration with security researchers
  • Continuous improvement based on audit findings

​
Security Disclosure

For security-related inquiries or to report potential vulnerabilities, please follow the IBC-Go Security Policy.

​
Additional Resources