> For the complete documentation index, see [llms.txt](https://docs.ibis.app/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ibis.app/reference/security-and-audits.md).

# Security and disclosure

## Security statements

### Audits

The Ibis smart contracts have been audited by Spearbit and Certora. Both audits reported 0 critical, 0 high and 0 medium findings.

## Responsible disclosure

Report a suspected vulnerability in Ibis or its apps to <security@ibis.financial>. Send support questions through [Support and integration](/reference/integrating-with-ibis.md).

### Report contents

* Name the affected host or network.
* For an affected onchain component, use its name from [Networks and addresses](/reference/deployed-contracts-and-addresses.md).
* Give the steps that reproduce the issue.
* State the impact: what the issue allows and which participants or funds it affects.

### Testing and publication

Ibis asks researchers not to test against live facilities or other people's accounts and wallets, and not to disclose a report publicly before Ibis responds.