Security & Privacy
Enterprise-grade security architecture protecting your identity and votes
100% Open Source & Verifiable
Forum is built on transparency. Every line of code, every smart contract, and every cryptographic proof is open source and publicly auditable. We believe trust comes from verification, not promises.
Security at a Glance
Core Security Principles
Device-Only Processing
All sensitive data processing happens exclusively on your device. Passport photos, biometric templates, and personal information never leave your phone.
Zero-Knowledge Architecture
Prove your eligibility to vote without revealing any personal information. Advanced cryptographic circuits ensure complete anonymity.
Cryptographic Security
Encryption Standards
AES-256 for data at rest • TLS 1.3 for data in transit • ECDSA for digital signatures • SHA-256 hashing for Merkle eligibility trees
Key Management
Hardware security modules • Secure key derivation (BIP-32) • Multi-signature wallets • Regular key rotation
Zero-Knowledge Proofs
Groth16 proof verification • Trusted setup verification • Merkle eligibility proofs • Per-post nullifiers to prevent duplicate anonymous votes
Infrastructure Security
Blockchain Security
Ethereum Layer 2 deployment • Immutable smart contracts • Consensus mechanism protection • MEV protection
Network Security
DDoS protection • Rate limiting • Geographic distribution • CDN security
Operational Security
24/7 monitoring • Incident response team • Regular security audits • Penetration testing
Privacy Protection
Data Minimization
Only necessary data collected • Automatic data purging • Pseudonymization techniques • Privacy by design
Anonymous Voting
Vote-identity unlinkability • Mixing networks • Temporal decorrelation • Metadata protection
Threat Model & Mitigations
Potential Threats
Sybil Attacks
Malicious actors creating multiple fake identities
Vote Buying
External parties attempting to purchase votes
Coercion
Forcing voters to vote in specific ways
State Attacks
Government surveillance or intervention
Our Mitigations
Eligibility and Nullifier Checks
Merkle eligibility proofs and per-post nullifiers reduce fake or duplicate voting without exposing voter identity
Anonymous Receipt System
No way to prove how you voted to third parties
Zero-Knowledge Privacy
Impossible to link votes to specific individuals
Decentralized Architecture
No central point of failure or control
Verify Everything
Don't trust, verify. All our code is open for inspection, from the mobile app to smart contracts. Check our implementations, review our cryptography, and validate our security claims yourself.
Community Verified
Our growing community of developers and security researchers continuously review our code. Join our contributors who help make Forum more secure every day. Every commit is reviewed, every change is tracked, and every security concern is addressed transparently on GitHub.
Security Contact
Found a security issue? Please report it responsibly according to the repository security policy.
Platform
Legal
© 2026 Forum Protocol. Built on Ethereum Layer 2. All rights reserved.