Arbitrum Security Program

Abstract

The Arbitrum Foundation proposes to continue and evolve the Arbitrum Audit Program (AAP) - launched on 1 August 2025 with a one-year mandate - into a broader Arbitrum Security Program (ASP), running for a further 12 months on a rolling-application basis.

• From "Audit" to "Security". AAP delivered on its original purpose - real vulnerabilities surfaced and remediated before mainnet, with a high share of net-new teams brought to Arbitrum - and demonstrated where subsidised security converts into the most ecosystem value. Building on that, the mandate broadens to four pillars covering the full security lifecycle: AI-assisted screening ah