Security Audits

Protocol Audit

As part of Facet's commitment to transparency, security, and decentralization, we have partnered with Zellic, a leading blockchain security firm, to conduct a comprehensive audit of Facet Protocol. These audits ensure that the Facet codebase is rigorously tested for vulnerabilities and adheres to the highest security standards prior to mainnet release.

Below, you will find the final audit reports produced by Zellic, detailing their findings and assessments. Each report reflects a different aspect of Facet Protocol's security:

Reports

A specialized adaptation of the standard Ethereum node, designed to facilitate the execution of Facet’s off-chain compute. It is responsible for detecting Facet transactions, extracting and delivering the payloads to Facet geth for execution, and securely storing the resulting state to be queried by Facet users and dApps. Facet node also issues and consumes Facet Compute Token (FCT), the protocol’s native gas token.

A forked version of OP Stack’s go-ethereum (geth), specifically adapted to process Facet transactions. It is responsible for executing Facet state transitions in a deterministic manner, ensuring that Facet nodes can derive and maintain consistent state from Ethereum’s transaction history.

The technical approach for state migration from legacy Facet (launched 2023) to the latest, permissionless EVM blockchain. Many EVM tools like the graph rely not just on “state” but also on event emissions, which cannot be migrated via a genesis block. Thus, a “MigrationManager” contract was developed to emit appropriate events (exactly once) needed to accurately reflect final, migrated Facet state.

A trust-minimized bridge, forked from OP Bridge. Given the Facet Protocol itself does not mandate the use of any enshrined (built-in) contracts, Facet Bridge is a third-party application developed to demonstrate how trust-minimized architecture can operate on Facet.

Last updated