Chore: Add audit reports (#645)

* Chore: Add audit reports

* FIx: Add original external links

* Chore: Add Issuance Token audit

* Fix: Reorder Security Policy slightly

* Chore: Update Hats report to final

* Fix: Wording of bounty existence

---------

Co-authored-by: 0xNuggan <[email protected]>

Author: marvinkruse

README.md

@@ -45,7 +45,7 @@ The protocol is based on our [technical specification](https://docs.google.com/d
 ## Contributing
 You are considering to contribute to our protocol? Awesome - please refer to our [Contribution Guidelines](./CONTRIBUTING.md) to find our about the processes we established to ensure highest quality within our codebase.
 
-## Safety
+## Security
 Our [Security Policy](./SECURITY.md) provides details about our Security Guidelines, audits, and more. If you have discovered a potential security vulnerability within the Inverter Protocol, please report it to us by emailing [[email protected]](mailto:[email protected]).
 
 -----

SECURITY.md

@@ -10,24 +10,26 @@ If you discover a potential security vulnerability or issue within our smart con
 
 We appreciate your efforts to disclose any security findings responsibly, and we are committed to collaborating with you to address the issue. Rest assured that you will be given proper credit for your contribution.
 
-## Responsible Disclosure
-
-Please practice responsible disclosure when reporting security issues. We kindly request that you do not publicly disclose or discuss the vulnerability until we have had sufficient time to investigate and address it. Privately disclosing the issue to us via email allows us to work on a fix without putting our users' funds at risk.
-
-We understand the importance of acknowledging and rewarding security researchers for their efforts. Even though our bug bounty program is currently set up, we assure you that you will not be unpaid for your valuable contributions. We are committed to fairly compensating those who help us improve the security of our platform.
-
-## Security Reviews and Audits
+## Audits and Security Reviews
 
 At Inverter Network, we prioritize the security of our smart contracts and follow a rigorous process of security reviews and audits:
 
 * Per our development and security guidelines, we require an external review for each pull request (PR) that goes from the `dev` branch to the `main` branch in our repository. We have partnered with [Team Omega](https://teamomega.eth.limo) to conduct these security reviews directly in the PRs.
 
 * Additionally, prior to major releases, we perform a full audit of any changed contracts via an external auditing company before the deployment. This ensures that our contracts undergo thorough scrutiny by professional auditors.
 
-* Our version 1 has been audited by [0xMacro](https://0xmacro.com/). The audit report will be published here once it becomes public. Furthermore, our v1 is currently undergoing a public audit competition on [Hats Finance](https://hats.finance/), leveraging the expertise of the broader security community.
+* Our version 1 has been audited by [0xMacro](https://0xmacro.com/) and underwent a public audit competition on [Hats Finance](https://hats.finance/), leveraging the expertise of the broader security community.
 
 We are committed to transparency and will make the results of our security reviews and audits available to the public, fostering trust and confidence in the security of our platform.
 
+**You can find all of our audit reports [here](./audits/).**
+
+## Responsible Disclosure
+
+Please practice responsible disclosure when reporting security issues. We kindly request that you do not publicly disclose or discuss the vulnerability until we have had sufficient time to investigate and address it. Privately disclosing the issue to us via email allows us to work on a fix without putting our users' funds at risk.
+
+We understand the importance of acknowledging and rewarding security researchers for their efforts. Even though our bug bounty program is currently not set up, we assure you that you will not be unpaid for your valuable contributions. We are committed to fairly compensating those who help us improve the security of our platform.
+
 ## Security Guideline
 
 At Inverter Network, we adhere to a comprehensive Security Guideline that outlines our best practices and approach to ensuring the security of our smart contracts. This guideline is a public document that we follow at all times. You can find our Security Guideline [here](https://docs.google.com/document/d/1CZgM9OEuibNrimbNeActve5n9ro3Ydu03OfSnZfRo_s).

audits/2024-06-19-macro.pdf

@@ -0,0 +1,14 @@
+## Audits and Security Reviews
+
+At Inverter Network, we prioritize the security of our smart contracts and follow a rigorous process of security reviews and audits:
+
+* Per our development and security guidelines, we require an external review for each pull request (PR) that goes from the `dev` branch to the `main` branch in our repository. We have partnered with [Team Omega](https://teamomega.eth.limo) to conduct these security reviews directly in the PRs.
+  * 2024-07-29 - Team Omega - Issuance Token Audit - [Report](./2024-07-29-team-omega-issuance-token.pdf)
+
+* Additionally, prior to major releases, we perform a full audit of any changed contracts via an external auditing company before the deployment. This ensures that our contracts undergo thorough scrutiny by professional auditors.
+
+* Our version 1 has been audited by [0xMacro](https://0xmacro.com/) and underwent a public audit competition on [Hats Finance](https://hats.finance/), leveraging the expertise of the broader security community.
+  * 2024-07-19 - 0xMacro Audit - [Report](./2024-06-19-macro.pdf) - [[*original*](https://0xmacro.com/library/audits/inverter-1)]
+  * 2024-08-12 - Hats Finance Audit Competition - [Report](./2024-08-12-hats.pdf) - [[*original*](https://github.com/hats-finance/Inverter-Network-0xe47e52c4fea05e555920f1dcdcc6fb8eca103eeb/blob/main/report.md)]
+
+We are committed to transparency and will make the results of our security reviews and audits available to the public, fostering trust and confidence in the security of our platform.