From fadb39cdd8ef271238a018a620b9e07e3b5af1c8 Mon Sep 17 00:00:00 2001 From: Jon C Date: Mon, 8 Jan 2024 18:43:55 +0100 Subject: [PATCH 1/2] docs: Specify that token-2022 is ready and eligible for bounties --- SECURITY.md | 5 +---- docs/src/token-2022.md | 13 ++++++++----- docs/src/token-2022/status.md | 16 +++++----------- 3 files changed, 14 insertions(+), 20 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index c366fb22651..d08589f9d82 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -51,14 +51,11 @@ the Solana Mainnet Beta. Currently, this includes: * [name-service](https://github.com/solana-labs/solana-program-library/tree/master/name-service/program) * [stake-pool](https://github.com/solana-labs/solana-program-library/tree/master/stake-pool/program) * [token](https://github.com/solana-labs/solana-program-library/tree/master/token/program) +* [token-2022](https://github.com/solana-labs/solana-program-library/tree/master/token/program-2022) If you discover a critical security issue in an out-of-scope program, your finding may still be valuable. -[token-2022](https://github.com/solana-labs/solana-program-library/tree/master/token/program-2022) -is still under audit and not meant for full production use. In the meantime, all -clusters have the latest program deployed **for testing and development purposes ONLY**. - Many programs, including [token-swap](https://github.com/solana-labs/solana-program-library/tree/master/token-swap/program) and [token-lending](https://github.com/solana-labs/solana-program-library/tree/master/token-lending/program), diff --git a/docs/src/token-2022.md b/docs/src/token-2022.md index 368277d1e10..6caa829eb59 100644 --- a/docs/src/token-2022.md +++ b/docs/src/token-2022.md @@ -8,9 +8,12 @@ fungible and non-fungible tokens. The Token-2022 Program is a superset of the functionality provided by the [Token Program](token.mdx). -The program is still under audit and not meant for full production use. In the -meantime, all clusters have the latest program deployed **for testing and development -purposes ONLY**. +The program is ready for full production use. All clusters have the latest +program deployed **without confidential transfer functionality**. + +The program with confidential transfer functionality will be deployed once +Solana v1.17 reaches mainnet-beta with the appropriate syscalls enabled. See the +[Project Status](token-2022/status.md) for more information. | Information | Account Address | | --- | --- | @@ -138,8 +141,8 @@ For information about the types and instructions, the Rust docs are available at ## Security Audits -The Token-2022 Program is currently under multiple audits to ensure safety of -funds. All audits will be published here as they are completed. +The Token-2022 Program has been audited multiple times to ensure safety of +funds. All audits are published here as they are completed. Here are the completed audits as of 13 December 2023: diff --git a/docs/src/token-2022/status.md b/docs/src/token-2022/status.md index 78564b7b828..632a227b486 100644 --- a/docs/src/token-2022/status.md +++ b/docs/src/token-2022/status.md @@ -2,9 +2,11 @@ title: Project Status --- -The Token-2022 program is still under audit and not meant for full production use. -In the meantime, all clusters have the latest program deployed **for testing and -development purposes ONLY**. +The Token-2022 program is ready for full production use. All clusters have the +latest program deployed **without confidential transfer functionality**. + +The program with confidential transfer functionality will be deployed once +Solana v1.17 reaches mainnet-beta with the appropriate syscalls enabled. ## Timeline @@ -12,7 +14,6 @@ Here is the general program timeline and rough ETAs: | Issue | ETA | | --------------------------- | ------------------------------ | -| Code-complete & final audit | Fall 2023 | | Mainnet recommendation | Winter 2024 (depends on v1.17) | | More ZK features | Spring 2024 (depends on v1.18) | | Freeze program | 2024 | @@ -35,13 +36,6 @@ with the ZK Token proof program enabled. More information: https://github.com/solana-labs/solana/pull/32613 -The ZK Token proof program was recently updated to support the splitting of -the longer zero-knowledge proofs into smaller components. The -token-2022 program is in the process of active development to properly process -the new proof format. - -More information: https://github.com/solana-labs/solana-program-library/issues/4817 - ## Future work ### Confidential transfers with fee From c0f95e8778688d692a25499f2d8fc8ebadd0ecbf Mon Sep 17 00:00:00 2001 From: Jon C Date: Mon, 8 Jan 2024 21:15:01 +0100 Subject: [PATCH 2/2] Updates based on review --- docs/src/token-2022.md | 11 ++--------- docs/src/token-2022/status.md | 4 ++-- 2 files changed, 4 insertions(+), 11 deletions(-) diff --git a/docs/src/token-2022.md b/docs/src/token-2022.md index 6caa829eb59..6458d4789ae 100644 --- a/docs/src/token-2022.md +++ b/docs/src/token-2022.md @@ -8,13 +8,6 @@ fungible and non-fungible tokens. The Token-2022 Program is a superset of the functionality provided by the [Token Program](token.mdx). -The program is ready for full production use. All clusters have the latest -program deployed **without confidential transfer functionality**. - -The program with confidential transfer functionality will be deployed once -Solana v1.17 reaches mainnet-beta with the appropriate syscalls enabled. See the -[Project Status](token-2022/status.md) for more information. - | Information | Account Address | | --- | --- | | Token-2022 Program | `TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb` | @@ -141,8 +134,8 @@ For information about the types and instructions, the Rust docs are available at ## Security Audits -The Token-2022 Program has been audited multiple times to ensure safety of -funds. All audits are published here as they are completed. +The Token-2022 Program has been audited multiple times. All audits are published +here as they are completed. Here are the completed audits as of 13 December 2023: diff --git a/docs/src/token-2022/status.md b/docs/src/token-2022/status.md index 632a227b486..a926581b7aa 100644 --- a/docs/src/token-2022/status.md +++ b/docs/src/token-2022/status.md @@ -2,8 +2,8 @@ title: Project Status --- -The Token-2022 program is ready for full production use. All clusters have the -latest program deployed **without confidential transfer functionality**. +All clusters have the latest program deployed **without confidential transfer +functionality**. The program with confidential transfer functionality will be deployed once Solana v1.17 reaches mainnet-beta with the appropriate syscalls enabled.