Add security

gnosis · Jul 17, 2018 · aaddd76 · aaddd76
1 parent ab107a8
commit aaddd76
Show file tree

Hide file tree

Showing 3 changed files with 38 additions and 7 deletions.
diff --git a/source/contribute.md b/source/contribute.md
@@ -1,7 +1,13 @@
 # Contribute
-The community is what makes DutchX great. 
+DutchX it's **100% open source** and it's been build as a comunity effort to improve
+the problems inherit from centralized platforms or other decentralized ones.
+
+The community is what makes DutchX great.
 
 Became part of it and contribute to create new interfaces, improve the tools, 
 and spread the word.
 
-Meet the comunity in Github and the [Gitter channel](https://gitter.im/gnosis/DutchX).
+Meet the comunity in Github and the [Gitter channel](https://gitter.im/gnosis/DutchX).
+
+Checkout the **Developer Guides** and document 
+[DutchX as an open platform](dutchx-as-an-open-platform.html).
diff --git a/source/market-makers.md b/source/market-makers.md
@@ -8,6 +8,6 @@ all the advantages that the DutchX can offer.
 For more information, check out: 
 <a href="_static/docs/DutchX_Market Makers.pdf" download>DutchX for Market Makers</a>
 
-> Also, if you are a Market Maker, you might be interested in:
->   * [DutchX as an open platform](dutchx-as-an-open-platform.md)
->   * [Run your own bots](./run-your-own-bots.html)
+Also, if you are a Market Maker, you might be interested in:
+  * [DutchX as an open platform](dutchx-as-an-open-platform.html)
+  * [Run your own bots](./run-your-own-bots.html)
diff --git a/source/security-of-the-contracts.md b/source/security-of-the-contracts.md
@@ -1,2 +1,27 @@
-# Contracts security
-TODO: Audit
+# Security
+Security was the main focus on the design and implementation of the DutchX.
+
+The mechanism are desing to solve the problems of other exchanges (centralized 
+and not centralized ones) so there are not parties taking advantage and 
+profiting out of the users. The result is a fare echange of tokens were all 
+users play under the same rules.
+
+The smart contract's code was submited to:
+* Constant internal audits within it's construction
+* A thourough external audit by Solidify ([https://solidified.io/](https://solidified.io/))
+  * Several auditors review the code in paralel in an isolated review. Then they
+    compare the findings and come to a group consensus. Then the final report
+    is done, and over some iterations all the risks are mitigated.
+  * Check out the <a hred="./_static/docs/Solidified_Audit_Report.pdf">Solidify Audit Report</a>.
+  * Check this post to learn how was the proccess: 
+  [https://medium.com/solidified/securing-gnosis-dutch-exchange-smart-contracts-a-case-study-65c3dcc0ed0b](https://medium.com/solidified/securing-gnosis-dutch-exchange-smart-contracts-a-case-study-65c3dcc0ed0b)
+
+The DutchX is a non-custodial trading protocol.
+Your funds are only ever held in audited smart contracts.
+
+There still is a public bug bounty running and no bugs have been discovered.
+
+As a user in the decentralized applications, and for DutchX in particular, you 
+are the only one who has access to your private key, so it's imporant that
+you **keep you keys safe**.
+