blog: add 2024 code audit

Author: notmandatory

docs/_blog/2024_code_audit.md

@@ -0,0 +1,17 @@
+—
+title: "2024 Code Audit"
+description: "2024 Code Audit by Wizardsardine"
+authors:
+ - Steve Myers
+date: "2024-12-03"
+tags: ["BDK", "project"]
+
+== draft: false
+
+A heartfelt thank you to our friends at [Spiral](https://spiral.xyz/) for sponsoring a code audit of the current `bdk` 1.0.0-beta Rust codebase. Given the size and scope of the BDK project, this audit should be considered a partial review. The effort was led by [Antoine Poinsot](https://gist.github.com/darosior) from [Wizardsardine](https://wizardsardine.com/), who provided valuable recommendations for the BDK team. You can find the full report [here](https://gist.github.com/darosior/4aeb9512d7f1ac7666abc317d6f9453b).
+
+As outlined in Antoine's report, the audit's primary focus was to review the core components that constitute a BDK-based wallet, particularly the new methods for managing and synchronizing chain data. Some reasonable simplifying assumptions were made, such as trusting that the Electrum or Esplora servers to which BDK wallets connect are not malicious. However, a certain level of trust will always be necessary for these two common light client protocols.
+
+While no critical defects were identified, a potential denial of service/performance issue was uncovered, along with several opportunities to enhance the code's fault tolerance. The team is currently addressing the performance issue, as well as some of the more straightforward recommendations. All suggested improvements have been [added to our issues backlog](https://github.com/bitcoindevkit/bdk/issues?q=is%3Aissue+label%3Aaudit) for future releases.
+
+If you are a user or potential user of BDK, or a Bitcoin Rust developer, we would love to hear your feedback. Please reach out on the [BDK Discord](https://discord.gg/dstn4dQ) or comment on individual [issues on GitHub](https://github.com/bitcoindevkit/bdk/issues?q=is%3Aissue+is%3Aopen). As a fully free and open-source project, the BDK team relies on YOU our community of users and contributors to help us create the best Bitcoin wallet library possible.