Three separate audit reports of Electric Coin Company software have been completed. The first two target the Zcash Improvement Proposals (ZIPs) for the Blossom network upgrade, scheduled for activation this fall. The other targets the mobile reference wallet SDK.
The findings indicated that we needed better vulnerability detection in our upstream dependencies for the SDK, which has now been added. The connection between SDK and lightwalletd still needs encryption and authentication for production deployments