Skip to content

update from main #17

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Jun 26, 2025
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions public/locales/en/translation.json
Original file line number Diff line number Diff line change
Expand Up @@ -98,6 +98,7 @@
"contractDeploymentTutorial": "Contract Deployment Tutorial",
"crossChainInteraction": "Scroll Messenger Cross-chain Interaction",
"runningNode": "Running a Scroll Node",
"auditingYourCode": "Auditing your code",
"bridgingERC20TokenThroughCustomGateway": "Bridge an ERC20 through the Custom Gateway",
"bridgingERC721NftThroughCustomGateway": "Bridging ERC721 NFT through Custom Gateway",
"bridgingERC1155ThroughCustomGateway": "Bridging ERC1155 through Custom Gateway",
Expand Down
2 changes: 2 additions & 0 deletions public/locales/es/translation.json
Original file line number Diff line number Diff line change
Expand Up @@ -95,6 +95,8 @@
"future": "Futuro",
"guides": "Guías",
"contractDeploymentTutorial": "Tutorial de Despliegue de Contratos",
"runningNode": "Corre Nodo de Scroll",
"auditingYourCode": "Audita tu código",
"crossChainInteraction": "Interacción Cross-chain del Scroll Messenger",
"bridgingERC20TokenThroughCustomGateway": "Bridging de un ERC20 a través de una Gateway Personalizada",
"bridgingERC721NftThroughCustomGateway": "Bridging de un ERC721 NFT a través de una Gateway Personalizada",
Expand Down
51 changes: 51 additions & 0 deletions src/content/docs/en/developers/guides/auditing-your-code.mdx
Original file line number Diff line number Diff line change
@@ -0,0 +1,51 @@
---
section: developers
date: Last Modified
title: "Auditing your code"
lang: "en"
permalink: "developers/guides/auditing-your-code"
whatsnext: { "Running a Scroll Node": "/developers/guides/running-a-scroll-node" }
excerpt: "Get your code audited in the Scroll Audit Marketplace built on Areta Market."
---

import Aside from "../../../../../components/Aside.astro"

The [Scroll Audit Marketplace](https://areta.market/scroll) is a dedicated platform built on [Areta Market](https://areta.market/) that gives Scroll builders a faster, cheaper, and more transparent path to securing audits from top-tier providers.

The Scroll Audit Marketplace is open to all Scroll builders, offering access to ~10 pre-vetted, whitelisted audit firms approved for your project by Areta and the Scroll Foundation.

<Aside type="tip" title="Why use the Scroll Audit Marketplace?">
Projects using the Areta Market platform unlock the following benefits:

1. 20-30% of proven cost savings
2. 6-8 quotes from top-tier auditors per request
3. Process reduced from weeks to days
</Aside>

### Requesting an Audit via Scroll Audit Marketplace

1. **Sign up to join the Scroll Audit Marketplace on Areta Market** using this [link](https://scroll.areta.market).
2. **Submit your audit scope**: Use a guided form or upload your specific requirements.
3. **Get 6-8 quotes**: From trusted firms like Hacken, Spearbit, Nethermind, and Zellic.
4. **Choose your auditor**: Based on price, timeline, or personal preference.
5. **Start your audit**: With clear, standardized terms.

### Whitelisted Audit Firms

The Scroll Audit Marketplace is launching with the following audit providers. This list will continue to grow, and updates will be maintained here:

- [Certora](https://www.certora.com/)
- [Hacken](https://hacken.io/)
- [Hexens](https://hexens.io/)
- [Immunefi](https://immunefi.com/)
- [Nethermind](https://www.nethermind.io/)
- [Sherlock](https://www.sherlock.xyz/)
- [Runtime Verification](https://runtimeverification.com/)
- [Spearbit](https://spearbit.com/)
- [Zellic](https://www.zellic.io/)

### How to Get Started

The [Scroll Audit Marketplace](https://areta.market/scroll) is open to anyone building on Scroll.

To get started, sign up for Areta Market using [this link](https://scroll.areta.market/register/client), follow the guided flow to set up your account, submit your first audit request, and connect with the right firm to help launch your project with confidence.
14 changes: 11 additions & 3 deletions src/content/docs/en/technology/security/audits-and-bug-bounty.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -16,11 +16,14 @@ Scroll treats security as a top priority.

Aside from rigorous testing, an internal security team, and comprehensive code reviews, we have also engaged with multiple security audit firms to conduct audits on our codebase. We have also launched a bug bounty program to encourage the community to participate in the security of our protocol.

<Aside type="danger" title="">
Audits don't guarantee the absence of security vulnerabilities. Using blockchains comes with risk, and Scroll is no
exception. We encourage users to use the protocol with caution and at their own risk.

<Aside>
This page is dedicated to Scroll audits. If you’re a builder seeking a professional review of your Scroll-based project, the [Scroll Audit Marketplace](https://areta.market/scroll) on Areta Market is designed specifically to support Scroll builders get access to top-tier, cost-effective, and streamlined audits.

Read more about the Scroll Audit Marketplace [here](/developers/guides/auditing-your-code), or [sign up directly](https://scroll.areta.market/register/client).
</Aside>


## Independent Audits

Scroll has worked with several industry-leading security audit firms to review our codebase, with critical code receiving reviews from multiple teams, including [Trail of Bits](https://www.trailofbits.com/), [OpenZeppelin](https://www.openzeppelin.com/), [Zellic](https://www.zellic.io/), and [KALOS](https://www.kalos.xyz/).
Expand All @@ -29,6 +32,11 @@ Scroll has worked with several industry-leading security audit firms to review o
- OpenZeppelin and Zellic have performed independent audits on our bridge & rollup contracts
- Trail of Bits has analyzed our node implementation

<Aside type="danger" title="">
Audits don't guarantee the absence of security vulnerabilities. Using blockchains comes with risk, and Scroll is no
exception. We encourage users to use the protocol with caution and at their own risk.
</Aside>

### zkEVM circuits

- Trail of Bits
Expand Down