Security and Audits

What this page is for

This page covers the most common security questions at a high level and points to the canonical pages for details.

How is CBTC secured?

CBTC uses threshold signing with FROST to secure Bitcoin reserves. For the detailed security explanation, see:

• https://docs.bitsafe.finance/developers/security-deep-dive

Is CBTC audited?

See the audit reports here:

• https://docs.bitsafe.finance/product-suite/cbtc/audit-reports You can also view the public audit report here:

• https://certificate.quantstamp.com/full/cbtc/5d0d805e-8cf0-4a39-bf1a-0e94899b3c1c/index.html

Where can I learn more about the security model?

• https://docs.bitsafe.finance/product-suite/cbtc/security-model

What are the main things to double-check before production use?

• Use the Developers docs as the source of truth for integration steps.
• Treat API behavior as subject to change unless explicitly labeled otherwise.
• Validate assumptions against the changelog for recent updates: https://docs.bitsafe.finance/developers/changelog