audit report link

README.md

@@ -79,7 +79,7 @@ The code doesn't include any incentive or punishment for the entities running th
 
 All the cryptography libraries used in this repository are being developed and used by industry-leading institutions, notably the [drand project](https://github.com/drand/drand) and its league of entropy that includes Cloudflare, EPFL, Kudelski Security, Protocol Labs, Celo, UCL, and UIUC.
 
-However, there are no finished audits for this repository yet. This code is offered as-is and without a warranty of any kind. It will need an independent security review before it should be considered ready for use in security-critical applications.
+The code has been audited by Certik, and the audit report can be found at https://github.com/MixinNetwork/audits.
 
 ## Contribution
 

web/index.html

@@ -71,7 +71,7 @@ <h2>Incentive and Punishment</h2>
         <p>The code doesn't include any incentive or punishment for the entities running the signer node software. It's up to their consensus on their mission, either to serve their customers a better user experience, or charge a small key signing request fee, or they could make some tokens to do community development.</p>
         <h2>Security</h2>
         <p>All the cryptography libraries used in this repository are being developed and used by industry-leading institutions, notably the <a href="https://github.com/drand/drand">drand project</a> and its league of entropy that includes Cloudflare, EPFL, Kudelski Security, Protocol Labs, Celo, UCL, and UIUC.</p>
-        <p>However, there are no finished audits for this repository yet. This code is offered as-is and without a warranty of any kind. It will need an independent security review before it should be considered ready for use in security-critical applications.</p>
+        <p>The code has been audited by Certik, and the audit report can be found at <a href="https://github.com/MixinNetwork/audits">https://github.com/MixinNetwork/audits</a>.</p>
         <h2>Contribution</h2>
         <p>The project doesn't accept feature requests and welcomes all security improvement contributions. Shall you find any security issues, please email <a href="mailto:[email protected]">[email protected]</a> before any public disclosures or pull requests.</p>
         <p>The core team highly values the contributions and provides at most a $100K bounty for any vulnerability report according to the severity.</p>