Cryptography and security are difficult for non-specialists to evaluate, which is why external audits are often seen as a source of reassurance. In practice though, the bigger risks for most people come from keeping life savings in a single-signature wallet at home, or from complex backup processes in traditional multisig setups.
Frostsnap has not yet undergone an external audit, similar to most hardware wallets at an early stage. That said, our design choices already reduce many common risks. By using advanced modern cryptography, Frostsnap enables multiple devices (your phone and signing devices) to each contribute entropy, with both sides verifying it. This makes the usual critical mistakes such as weak randomness or flawed key generation extremely difficult.
We also build exclusively in memory-safe programming languages, eliminating an entire class of vulnerabilities that have historically affected wallets written in C or C++.
Every change goes through careful peer review, and as Frostsnap adoption grows, the number of independent eyes on the code will only increase.
