> For the complete documentation index, see [llms.txt](https://whitepaper.ethos.network/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://whitepaper.ethos.network/security/smart-contract-audits.md).

# Smart Contract Audits

## Smart Contract Audits

Ethos completed three smart contract audit competitions through Sherlock.xyz for Ethos.Network. The $WHUF token and sale contracts were separately audited by Guardian in 2026.

| Audit                         | Date               | Competition Link                                             | Judging Link                                                         | PDF Report                                                                                        |
| ----------------------------- | ------------------ | ------------------------------------------------------------ | -------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------- |
| Ethos 1 (Social Contracts)    | November 3rd, 2024 | <https://github.com/sherlock-audit/2024-10-ethos-network>    | <https://github.com/sherlock-audit/2024-10-ethos-network-judging>    | <https://github.com/sherlock-audit/2024-10-ethos-network-judging/blob/main/Audit\\_Report.pdf>    |
| Ethos 2 (Financial Contracts) | Dec 5, 2024        | <https://github.com/sherlock-audit/2024-11-ethos-network-ii> | <https://github.com/sherlock-audit/2024-11-ethos-network-ii-judging> | <https://github.com/sherlock-audit/2024-11-ethos-network-ii-judging/blob/main/Audit\\_Report.pdf> |
| Ethos 3 (Reputation Market)   | Dec 30, 2024       | <https://github.com/sherlock-audit/2024-12-ethos-update>     | <https://github.com/sherlock-audit/2024-12-ethos-update-judging>     | <https://github.com/sherlock-audit/2024-12-ethos-update-judging/blob/main/Audit\\_Report.pdf>     |

### Contract Upgrades

Ethos deployed the following smart contract upgrades:

| Change                                            | Description                                                                         | Audited  | Transaction                                                                                               |
| ------------------------------------------------- | ----------------------------------------------------------------------------------- | -------- | --------------------------------------------------------------------------------------------------------- |
| Update Vouch After Attestation (Vouch Contract)   | If you vouch for a social identity, update the Subject Profile Id upon attestation. | Sherlock | <https://basescan.org/tx/0xe2e83110a708016ac45ef5b50c514cb09b16a476c5b2da966351f310d5b426c1#eventlog#539> |
| Update Vouch After Attestation (Profile Contract) | If you vouch for a social identity, update the Subject Profile Id upon attestation. | Sherlock | <https://basescan.org/tx/0xaae965a3f277c66d488cceab54a3ac7232187df13da49675fc724bf5d90681ea#eventlog#306> |
| Empty Array Check                                 | Avoid attempts to pop() from an empty vouch tracking index.                         | Sherlock | <https://basescan.org/tx/0xfd5197a6fc15315b11e170b7612d91ad643730e8a9180b16326e07c805d9e8a4>              |

### $WHUF Token & Sale Contract Audit

The $WHUF token contract and token sale contracts were audited by Guardian in 2026. All critical and high severity findings were resolved prior to deployment.

| Audit                                   | Date      | Report                                              |
| --------------------------------------- | --------- | --------------------------------------------------- |
| $WHUF Token & Sale Contracts (Guardian) | July 2026 | <https://ethos-foundation.org/audit/2026-07-09.pdf> |