During Q1 2025, Least Authority (in their role as the Zcash Ecosystem Security Lead) undertook an audit of the FROST Demo code, including the frost-client command line tool and frostd server components. We expect that the FROST server, frostd, will be used by wallets to help participants and coordinators communicate with each other and that the FROST client, in addition to being a working command line tool, will help wallets to integrate FROST as an example of how to interact with the server.
We are pleased to announce that the audit contained no high severity findings, and that we have addressed and mitigated the audit findings which can be found in the current main branch of the frost-zcash-demo github repository.
You can find a link to the audit report in Least Authority’s blog post.