# Audits

Security audit reports for the Project 0 (mrgnLendv2) protocol.



Security is a core priority for Project 0. The mrgnLendv2 program has undergone professional security audits and maintains an active bug bounty program.

## Audit Reports [#audit-reports]

The mrgnLendv2 program has been audited by multiple professional security firms, including **Ottersec**, **sec3**, **Hashlock**, **Ackee**, and **Accretion**. Audit reports are publicly available:

<Cards>
  <Card title="Audit Reports" href="https://github.com/0dotxyz/marginfi-v2/tree/main/audits">
    View all audit reports on GitHub, including general reviews, feature
    audits, and subsequent reviews.
  </Card>
</Cards>

## Fuzz Testing [#fuzz-testing]

The protocol maintains an extensive fuzz testing suite that continuously tests for edge cases and vulnerabilities:

<Cards>
  <Card title="Fuzz Tests" href="https://github.com/mrgnlabs/marginfi-v2/tree/main/programs/marginfi/fuzz">
    View the fuzz testing suite on GitHub.
  </Card>
</Cards>

## Responsible Disclosure [#responsible-disclosure]

If you have a vulnerability report, send it to [security@mrgn.group](mailto:security@mrgn.group). Do not disclose vulnerabilities publicly before they have been addressed.

For scope, severity classification, and disclosure process, see the [security policy](https://github.com/0dotxyz/marginfi-v2/blob/main/SECURITY.md).

## Open Source [#open-source]

The mrgnLendv2 program is fully open source. Anyone can review the code, run the test suite, and verify the deployed program matches the published source:

<Cards>
  <Card title="GitHub Repository" href="https://github.com/mrgnlabs/marginfi-v2">
    The complete source code for the mrgnLendv2 program, including tests,
    documentation, and deployment scripts.
  </Card>
</Cards>