# Polkadot micro-sr25519 security audit

micro-sr25519 is a TypeScript implementation of the sr25519 signature scheme used in the Polkadot ecosystem; the audit covered Schnorr signatures over Ristretto, hard and soft HD key derivation, and VRF outputs with proofs.

Codezen audited Polkadot micro-sr25519 together with Oak Security. Technologies in scope: Cryptography, TypeScript and Polkadot. We reported 11 findings: 7 minor and 4 informational.

- Audit type: Cryptography library audit
- Technologies: Cryptography, TypeScript, Polkadot
- Ecosystem: Polkadot
- Delivered with: Oak Security
- Report date: 12 June 2025
- Full report (PDF): https://github.com/oak-security/audit-reports/blob/main/Polkadot/2025-06-12%20Audit%20Report%20-%20Polkadot%20micro-sr25519%20v1.0.pdf
- Project website: https://github.com/paulmillr/micro-sr25519
- Page: https://www.codezen.tech/audits/polkadot-micro-sr25519/

## Findings by severity

| Severity | Count |
| --- | --- |
| Critical | 0 |
| Major | 0 |
| Minor | 7 |
| Info | 4 |
| Total | 11 |

Need a similar audit? Email info@codezen.tech or visit https://www.codezen.tech/.