Audit Open Original ↗
MAGIC Grants Monero FCMP ++ Crypto
Type
Security review
Client
The MAGIC Grants community fund
Date
2026-07
Domain
Crypto
Effort
2 wks
Section
Cryptography Reviews
Trail of Bits's security review of The MAGIC Grants community fund (Jul 2026) identified 6 issues: 6 informational.
Findings · 6
- 1 Edwards-to-Weierstrass point conversion computes an incorrect field inverse but a correct overall result for (0,-1) Informational
- 2 ge_double_scalarmult functions leave output uninitialized when scalars are zero Informational
- 3 fe_equals may not be constant-time Informational
- 4 Edwards-to-Weierstrass conversion outputs negated y-coordinate Informational
- 5 sc_check left-shifts negative values Informational
- 6 Rust FFI function selene_scalar_from_bytes depends on fragile memory layout assumptions Informational
Findings extracted from the published report PDF. See the full report below for details and remediation.
Related
