# AZ Chainsafe Bridge Audit FOR VOTE
**URL:** http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385
**Category:** ╰ Funding | Submissions
**Tags:** in-progress, accepted
**Created:** [April 18, 2023, 7:13pm UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385 "2023-04-18T19:13:34Z")
**Posts on this page:** 20
**Page:** 1
### Author:  [@0x3639](http://forum.zenon.org/u/0x3639)
#### Post date: [April 18, 2023, 7:13pm UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/1 "2023-04-18T19:13:34Z")
@romeo and @sumamu and I are talking to the ChainSafe team to audit the Solidity contract ONLY. They have proposed the following.
* * *
Estimate: 1 eng-week @ USD$17,000/week (Which includes their discounted rate)
Duration: 1 week
Start date: TBD (We have an available slot for next week, or after mid-June)
Note: Our service involves two auditors independently checking code before coming together to compare results and produce a report. We then give you the opportunity to fix changes, followed by the compilation of a final report after those changes are made.
* * *
We asked for an additional discount and are waiting feedback. [ChainSafe](https://chainsafe.io/) seems to have a very good reputation and @aliencoder recommended them over Certik. We also asked for them to tweet their report after we make recommended changes.
You can see some of the ChainSafe Clients here: [https://chainsafe.io/audits](https://chainsafe.io/audits)
I am prepared to fund this with my own money and seek reimbursement from AZ at an exchange rate of $1.20 / $0.12 for every USD. I will not negotiate this rate. I need to form an LLC to sign this contract. I will need to file a tax return, claiming the income and expense and expose myself to audit.
If anyone else wants to take this on and bid a higher exchange rate (1.21 / 0.121 for example), please do so. Otherwise what does the community think about his proposal?
_Poll ([view on site](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/1))_
## UPDATED 24 April 23
ChainSafe is under contract. We have agreed to a lower price than 17K but there could be additional engineering time if they find any critical bugs. The community clearly support this initiative given the vote results. I am going to submit (2) AZs that total up to $17,000 USD per the terms above. Once approved and the assignment is complete, I will request funding for the actual cost spent. I will document and support those costs.
AZ#1 = $12,000 USD
4,157 ZNN @ 1.20 = $4,988
50,000 QSR @ 0.12 = $6,000
AZ#2 = $5,000 USD
10 ZNN @ 1.20 = $12
50,000 QSR @ 0.12 = $6,000
AZ1 + AZ2 = $17,000
$10,988 + $6,012 = $17,000
---
### Author:  [@tapwoot](http://forum.zenon.org/u/tapwoot)
#### Post date: [April 18, 2023, 10:13pm UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/2 "2023-04-18T22:13:55Z")
security is important, def pays for itself
---
### Author:  [@Jeron](http://forum.zenon.org/u/Jeron)
#### Post date: [April 19, 2023, 8:23am UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/3 "2023-04-19T08:23:42Z")
It’d be great to get the solidity contract audited.
Do they have the capability/willingness to audit the NoM code updates as well? Any idea on price for this?
I assume it would cost quite a bit more, but may be worthwhile given the potential impact of a bridge hack.
---
### Author:  [@romeo](http://forum.zenon.org/u/romeo)
#### Post date: [April 19, 2023, 9:30am UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/4 "2023-04-19T09:30:16Z")
We haven’t asked yet for anything else, need to solve a few issues first before moving ahead with this audit (KYC, payment etc) and then see where it goes
---
### Author:  [@sumamu](http://forum.zenon.org/u/sumamu)
#### Post date: [April 19, 2023, 2:07pm UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/5 "2023-04-19T14:07:39Z")
This is exactly the kind of community initiative that moves the entire project forward. I’m backing @0x3639 and I think the sooner we get it done, the better. There was an opening next week and if we’d manage to get that one we might even have the bridge audited before it’s even launched.
As I mentioned on TG, [ChainSafe even developed a bridge (Sygma)](https://github.com/ChainSafe/chainbridge-solidity) so they must have the necessary experience to audit one.
---
### Author:  [@0x3639](http://forum.zenon.org/u/0x3639)
#### Post date: [April 19, 2023, 2:19pm UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/6 "2023-04-19T14:19:27Z")
Awesome. Thank you. I’m ready to go once they get back to us on a final price. We can have them signed up by tomorrow.
---
### Author:  [@dat\_she\_pepe](http://forum.zenon.org/u/dat_she_pepe)
#### Post date: [April 19, 2023, 8:05pm UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/7 "2023-04-19T20:05:08Z")
I support that even if I still think Gorg is Mr. Kaine
---
### Author:  [@0x3639](http://forum.zenon.org/u/0x3639)
#### Post date: [April 20, 2023, 1:10pm UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/8 "2023-04-20T13:10:37Z")
looks like everyone supports this. I’m trying to work out final details today. Will report back.
---
### Author:  [@0x3639](http://forum.zenon.org/u/0x3639)
#### Post date: [April 20, 2023, 9:24pm UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/9 "2023-04-20T21:24:26Z")
We come to an agreement. I will be signing the agreement and they will start work on Monday next week. They have agreed to a lower price but I might be subject to a confi, so I need to read that before sharing the number. It’s less than the 17K approved in the vote above.
FYI - @sumamu @aliencoder
---
### Author:  [@0x3639](http://forum.zenon.org/u/0x3639)
#### Post date: [April 21, 2023, 12:51am UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/11 "2023-04-21T00:51:58Z")
I removed the Scope of Work. I want to double check it’s not confidential.
---
### Author:  [@DrD3](http://forum.zenon.org/u/DrD3)
#### Post date: [April 21, 2023, 6:57am UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/12 "2023-04-21T06:57:23Z")
Thank you for your services ser!!
Since Chainsafe’s going to be initiating the bridge’s audit on Monday- wouldn’t it be more reasonable to push the launching of Sumamu’s bridge until they give the green-light?
---
### Author:  [@sumamu](http://forum.zenon.org/u/sumamu)
#### Post date: [April 21, 2023, 8:29am UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/13 "2023-04-21T08:29:26Z")
Absolutely, the deployment of the bridge solidity contract will be postponed until after the audit is completed and all vulnerabilities are resolved (if there are any).
The network upgrade featuring the bridge embedded contract should stay on course.
---
### Author:  [@mehowbrainz](http://forum.zenon.org/u/mehowbrainz)
#### Post date: [April 21, 2023, 11:07pm UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/14 "2023-04-21T23:07:05Z")
I think this topic should’ve been in #╰ Funding | Staging category otherwise we can make a new major category for security. It’s not entirely a development task while it does touch the subject. If that’s okay, I’d like to move it. Also the #az tag used is not what we use here to highlight an AZ candidate, we use the staging sub-categories cc @SugoiBTC
---
### Author:  [@0x3639](http://forum.zenon.org/u/0x3639)
#### Post date: [April 24, 2023, 10:18am UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/15 "2023-04-24T10:18:38Z")
AZs submitted for approval.
> **[AZ for ChainSafe Audit](https://blog.zenon.info/az-for-chainsafe-audit/)**
>
> (Any views expressed in the below are the personal views of the author and should not form the basis for making investment decisions, nor be construed as a recommendation or advice to engage in investment transactions.)
>
> @0x3639, in consultation with...
---
### Author:  [@vilkris](http://forum.zenon.org/u/vilkris)
#### Post date: [April 24, 2023, 4:19pm UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/16 "2023-04-24T16:19:00Z")
Thank you for pushing this forward 0x, great work. Did I understand correctly that ChainSafe may bill more than the estimated $20k if they find a critical bug they need to investigate?
If the actual expenses go over $20k, I’m assuming you’d make a third AZ request to cover them?
---
### Author:  [@DrD3](http://forum.zenon.org/u/DrD3)
#### Post date: [April 24, 2023, 7:07pm UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/17 "2023-04-24T19:07:40Z")
It’s only fair.
---
### Author:  [@0x3639](http://forum.zenon.org/u/0x3639)
#### Post date: [April 24, 2023, 9:32pm UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/18 "2023-04-24T21:32:56Z")
The actual cost is less than 20K. I’ll DM you the amount. By asking for up to 20K we should have enough to code the audit, filing fees, and time to research 1 or 2 critical bugs. If we exceed 20K I would need to ask for a 3rd AZ to cover that cost, but I don’t think we will blow that budget.
---
### Author:  [@zyler9985](http://forum.zenon.org/u/zyler9985)
#### Post date: [April 25, 2023, 8:28am UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/19 "2023-04-25T08:28:24Z")
It’d be good if we can link the results of the audit here in this thread (in addition to whereever else it’s being posted). I’m making a thing which discusses the bridge, and my link about the chainsafe audit goes to this forum post.
---
### Author:  [@romeo](http://forum.zenon.org/u/romeo)
#### Post date: [April 25, 2023, 9:40am UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/20 "2023-04-25T09:40:37Z")
We’ll create a dedicated topic and pin it when the results are in I think, will give newcomers confidence when searching info about the bridge hopefully
---
### Author:  [@0x3639](http://forum.zenon.org/u/0x3639)
#### Post date: [April 25, 2023, 8:55pm UTC](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385/21 "2023-04-25T20:55:01Z")
I just made the first payment to ChainSafe - $7500.
[Next page](http://forum.zenon.org/t/az-chainsafe-bridge-audit-for-vote/1385.md?page=2)