TechFlow news: Worldcoin has released the results of its audit. The audit was conducted by Trail of Bits, beginning on August 14, 2023, and assessed software versions up to July 8, 2023. The current software version is 4.0.34, first released on January 17, 2024.
The audit objectives included verifying the following claims:
- The default registration process collects only personally identifiable information (PII) such as iris codes and does not write it to persistent storage.
- In non-default registration flows, PII is securely handled and stored on the device using asymmetric encryption.
- The Orb does not extract sensitive data from users' devices.
- Users' iris codes are securely protected and transmitted to the backend only once per request.
- No vulnerabilities directly targeting the project's goals were found during the audit. The audit provided recommendations for strengthening kernel configurations and runtime software.




