In the past 6 weeks, we performed 4 smart contract security audits, worked and collaborated with 16 companies in the space and grew the Zeppelin community 320+ strong.
We are now ready to ship the first major release of the OpenZeppelin framework.
OpenZeppelin is an open-source framework to build secure smart contracts in the Solidity language — read more about our motivations here.
To achieve this goal, v1.0.0 provides a common repository of reusable and secure smart contracts for projects to use. Contracts were developed using industry standard contract security patterns and best practices.
Instead of developing their smart contracts from scratch and be open to potential vulnerabilities, projects can use OpenZeppelin contracts — or inherit from them. They can then customize the contracts using their own parameters.
We’ve spent the past year working and collaborating with 20+ projects in the space. Based on their needs and challenges, we focused v1.0.0 on the development of contracts for tokens, crowdsales, bug bounties and emergency stop, among others. You can find the complete set of contracts here.
As part of the release, we wrote a simple documentation describing the contracts and their main functions. We also included a set of tests, which we plan to expand in the following weeks, aiming for >95% test coverage.
We’ve redesigned the OpenZeppelin site with an updated list of audits and collaborators. The site includes a cool animation that shows how easy it is to install OpenZeppelin and use it in your project.
v1.0.0 is the first step for OpenZeppelin becoming the standard framework for secure smart contract development. To learn more about our future developments, check out our development roadmap.
OpenZeppelin is currently being developed as an open-source and community-driven framework. If you want to join us and contribute to Zeppelin, head over to our GitHub repo and read our contributing guide.
We’ll continue performing smart contract security audits to projects. Expect 2 more coming in December.
For projects and organizations interested in performing security audits, or integrating OpenZeppelin’s security patterns into their smart contracts, get in touch with us at contact@openzeppelin.org.