From 792be1a66ef15a4387604ea402bac4b09036247a Mon Sep 17 00:00:00 2001 From: "marvel.yu" Date: Wed, 31 Dec 2025 12:25:44 +0800 Subject: [PATCH] update blocksec audit report --- docs/about-morph/10-altfeetx.md | 6 ++++++ docs/about-morph/4-morphs-architecture.md | 3 +++ 2 files changed, 9 insertions(+) diff --git a/docs/about-morph/10-altfeetx.md b/docs/about-morph/10-altfeetx.md index 84ead601..0a1b6594 100644 --- a/docs/about-morph/10-altfeetx.md +++ b/docs/about-morph/10-altfeetx.md @@ -289,5 +289,11 @@ sigHash = keccak256(0x7F || rlp([ ])) ``` +## Blocksec Audit report +We commissioned Blocksec to conduct a full security audit of Morph’s EmeraId implementation, initiated on November 24, 2025. The audit assessed the upgrade’s robustness and adherence to security best practices and was executed according to an agreed scope and testing plan tailored for this implementation. +Blocksec performed a comprehensive assessment using a white-box–led methodology designed to closely simulate real-world attack conditions. The evaluation combined black box testing, grey box testing, and white box testing techniques. The audit also incorporated analysis informed by known blockchain security vulnerabilities, alongside exploratory testing for previously unknown or emerging attack vectors. + +The full audit findings and methodology are available in the official Blocksec report: +[Access the Blocksec EmeraId Audit Report](https://github.com/morph-l2/audits/blob/main/blocksec/blocksec_morph_emerald_upgrade_v1.0-signed.pdf) diff --git a/docs/about-morph/4-morphs-architecture.md b/docs/about-morph/4-morphs-architecture.md index a4a96729..67230126 100644 --- a/docs/about-morph/4-morphs-architecture.md +++ b/docs/about-morph/4-morphs-architecture.md @@ -78,6 +78,9 @@ We commissioned a full security audit from Sherlock, and the results are publicl The Trail of Bits team conducted an in-depth audit of our codebase, including verification of implemented fixes. The complete report is available here [Trail of Bits Audit Report](https://github.com/morph-l2/audits/blob/main/tob/Morph%20-%20Comprehensive%20Report%20with%20Fix%20Review.pdf). +### Blocksec Audit Report: + +We commissioned Blocksec to conduct a full security audit of Morph’s EmeraId upgrade. The audit assessed the upgrade’s robustness and adherence to security best practices and was executed according to an agreed scope and testing plan tailored for this implementation. The audit report is available here [Blocksec Audit Report](https://github.com/morph-l2/audits/blob/main/blocksec/blocksec_morph_emerald_upgrade_v1.0-signed.pdf). ### Audit Scope: