---
title: Security audits
description: "Various security assessments, audits, and reports for the Tact compiler, Tact smart contracts, and other components in the Tact ecosystem"
---

In addition to optimizing gas usage and reducing fees, the security of the Tact ecosystem is paramount. This includes the safety of the Tact compiler, other Tact-related tools, and smart contracts written in Tact.

This page lists various security assessments, audits, and reports for the Tact compiler, Tact smart contracts, and other components in the Tact ecosystem.

## Tact compiler {#compiler}

### 2025-01: Security Assessment by Trail of Bits {#202501-trailofbits-tact}

The security audit for Tact 1.5.0 has been completed by [Trail of Bits](https://www.trailofbits.com/), a leading Web3 security firm.

By the end, no high-severity vulnerabilities were found. That said, some bugs and points of improvement were discovered and addressed in a new [Tact 1.5.4 bugfix release][1.5.4].

The complete report is available on the Trail of Bits GitHub repository, as well as on the Tact website and its repository as a backup:

* [Original PDF, Trail of Bits repository](https://github.com/trailofbits/publications/blob/master/reviews/2025-01-ton-studio-tact-compiler-securityreview.pdf)
* [Same PDF, Tact website](https://tact-lang.org/assets/pdfs/2025-01-ton-studio-tact-compiler-securityreview.pdf)
* [Same PDF, backup in the website repository](https://github.com/tact-lang/website/blob/416073ed4056034639de257cb1e2815227f497cb/pdfs/2025-01-ton-studio-tact-compiler-securityreview.pdf)

Upgrade to the newest Tact version: [Compiler upgrades](https://docs.tact-lang.org/book/compile/#upgrades).

[1.5.0]: https://www.npmjs.com/package/@tact-lang/compiler/v/1.5.0
[1.5.4]: https://www.npmjs.com/package/@tact-lang/compiler/v/1.5.4
