Mina · Vulnerability Disclosure

Mina Vulnerability Disclosure

Vulnerability disclosure

Mina publishes a vulnerability disclosure policy for reporting security issues.

CompanyCryptoBlockchainZero-KnowledgezkAppsGraphQLWeb3Cryptocurrency
Program:

Disclosure Policy

Policy

Security Contact

Source

Vulnerability Disclosure

mina-vulnerability-disclosure.yml Raw ↑
generated: '2026-07-20'
method: searched
probe: true
source: https://docs.minaprotocol.com/mina-security
policy:
  - https://docs.minaprotocol.com/mina-security
bug_bounty:
  - name: Mina Bug Bounty Program
    context: Listed under "Current Community Security Programs" on the Mina Security page.
audits:
  - {target: o1js, auditor: Veridise, date: '2024-08-27'}
  - {target: Pickles, auditor: Least Authority, date: '2023-12-12'}
  - {target: Transaction Logic and Transaction Pool, auditor: Least Authority, date: '2023-08-28'}
  - {target: Mina codebase and ecosystem projects, auditor: Mo Ashouri, date: '2022-10-16'}
  - {target: Mina Client SDK / Signature Library, auditor: NCC Group, date: '2022-02-22'}
  - {target: Mina Protocol and Staking Economics, auditor: Gauntlet Network, date: '2020-12'}
  - {target: Coda Protocol, auditor: NCC Group, date: '2020-05-14'}
evidence:
  - {source: https://docs.minaprotocol.com/mina-security, kind: security-page, keywords: [bug bounty, audits, responsible disclosure]}
notes: >-
  Mina publishes a dedicated Security page cataloguing independent third-party
  audits and a community bug bounty program. No /.well-known/security.txt is
  published on the web hosts.