> ## Documentation Index
> Fetch the complete documentation index at: https://new-docs.squads.so/llms.txt
> Use this file to discover all available pages before exploring further.

# Security Audits

> Independent third-party security audits of Squads Protocol

Squads Protocol is the onchain program (smart contract) that powers Squads. The current version, V4, has ten independent security audit reports from four specialized firms. The final audited commit is the one deployed onchain, and the program has been immutable since November 2024: its authority was permanently revoked, so the audited code is exactly what runs onchain and can never be modified.

Audits are one layer of the protocol's broader security model, alongside [formal verification](/security/formal-verification) and an immutable architecture.

## Audit timeline

V4's audit process spanned two years across three phases: initial security review (2023), formal verification (2023), and pre-immutability validation (2024).

| Firm | Date | Report |
| - | - | - |
| Trail of Bits | 2023 | [View report](https://github.com/Squads-Protocol/v4/blob/main/audits/trail_of_bits_squads_v4_security_audit.pdf) |
| Neodyme | 2023 | [View report](https://github.com/Squads-Protocol/v4/blob/main/audits/neodyme_squads_v4_report.pdf) |
| OtterSec | 2023 | [View report](https://github.com/Squads-Protocol/v4/blob/main/audits/ottersec_squads_v4_audit.pdf) |
| Certora | October 2023 | [View report](https://github.com/Squads-Protocol/v4/blob/main/audits/certora_squads_v4_security_report_and_formal_verification.pdf) |
| Certora | December 2023 | [View report](https://github.com/Squads-Protocol/v4/blob/main/audits/certora_squads_v4_security_report_and_formal_verification_2024.pdf) |
| Neodyme | 2024 | [View report](https://github.com/Squads-Protocol/v4/blob/main/audits/neodyme_squads_v4_report_2024.pdf) |
| OtterSec | 2024 | [View report](https://github.com/Squads-Protocol/v4/blob/main/audits/ottersec_squads_v4_audit_2024.pdf) |
| Certora | November 2024 | [View report](https://github.com/Squads-Protocol/v4/blob/main/audits/certora_squads_v4_security_report_and_formal_verification_2024_final.pdf) |
| Neodyme | December 2024 | [View report](https://github.com/Squads-Protocol/v4/blob/main/audits/neodyme_squads_v4_report_2024_final.pdf) |
| OtterSec | December 2024 | [View report](https://github.com/Squads-Protocol/v4/blob/main/audits/ottersec_squads_v4_report_2024_final.pdf) |

## About the firms

* **Trail of Bits** is a security research firm that has audited projects across blockchain and traditional software, including Solana core infrastructure.
* **Neodyme** specializes in Solana runtime-specific vulnerabilities including account validation, instruction processing, and cross-program invocation security.
* **OtterSec** focuses on Solana program security and developed the first framework for formally verifying Solana programs.
* **Certora** combines security audits with [formal verification](/security/formal-verification), using mathematical methods to prove correctness of critical protocol properties.

<Info>
  Squads Protocol V3 (launched 2022) is the legacy version, still used by some teams through a separate frontend. V3 underwent three independent audits before becoming immutable in February 2023. Reports: [Bramah](https://github.com/Squads-Protocol/squads-mpl/blob/main/Squads_V3_Audit_Bramah.pdf) · [OtterSec](https://github.com/Squads-Protocol/squads-mpl/blob/main/Squads%20V3%20-%20OtterSec%20Audit.pdf) · [Neodyme](https://github.com/Squads-Protocol/squads-mpl/blob/main/Squads_V3_MPL_Audit_Neodyme.pdf)
</Info>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.