Nori: Mina Multisig audit report
Project Information
CATEGORY
Zero-knowledge
NETWORK
Mina
WEBSITE
https://github.com/Nori-zk
DESCRIPTION
From Jun. 15, 2026 to Jun. 22, 2026, Nori/o1Labs engaged Veridise to conduct a security assessment of Mina Multisig by Raspbery Devs. The security assessment covered the implementation of integrating the FROST multisignature protocol for Mina signatures. Veridise conducted the assessment over 2 person-weeks, with 2 security analysts reviewing the project over 1 week. The review strategy involved the Veridise security analysts thoroughly reviewing the code.
Audit Report
SCOPE
The scope of this security assessment is limited to the frost-bluepallas and mina-tx folders of the source code provided by the Mina Multisig developers, which contains the implementation of the Mina Multisig. Specifically, the following files were in scope:
- frost-bluepallas/src
- errors.rs
- hasher.rs
- keys.rs
- lib.rs
- negate.rs
- signing_utilities.rs
- mina-tx/src
- bluepallas_compat.rs
- pallas_message.rs