@@ -15,17 +15,17 @@ Since launching [Azimuth](https://urbit.org/posts/azimuth-is-on-chain/), we’ve
1515
1616Azimuth is [the Urbit public key infrastructure](https://urbit.org/posts/azimuth-is-on-chain/). It’s a set of Ethereum smart contracts that allow for cryptographic ownership and management of your Urbit identity. It also provides a governance mechanism whereby galaxy owners are able to propose and vote on improvements.
1717
18−People already [use Azimuth](https://github.com/urbit/bridge) to boot Arvo ships, spawn stars and planets for others and transfer points. But Azimuth is a general identity system, with great potential to be used beyond Arvo: there are primitives for supporting reputations, payments and cryptographically securing communication channels.
18+People already [use Azimuth](https://github.com/urbit/bridge) to boot Arvo ships, spawn stars and planets for others and transfer points. But Azimuth is a general identity system, with great potential to be used beyond Arvo: there are primitives for supporting reputations, payments and securing communication channels.
1919
2020## Security program details
2121
22−We had the Azimuth contracts audited by Open Zeppelin, Blockchain at Berkeley and Blocktrax, but we don’t want to take any chances. We’re hoping that the HackerOne program will help us get more eyes on the contracts, identify vulnerabilities and get out in front of any problems. You can find more information about the program at [our page]() on HackerOne.
22+We had the Azimuth contracts audited by Open Zeppelin, Blockchain at Berkeley and Blocktrax, but we don’t want to take any chances. We’re hoping that the HackerOne program will help us get more eyes on the contracts, identify vulnerabilities and get out in front of any problems. You can find more information about the program at [our page](https://hackerone.com/tlon) on HackerOne.
2323
2424We’re interested in any vulnerability in the Azimuth contracts that would allow an attacker to either seize other user’s points, impersonate points or that would result in the platform becoming unusable.
2525
2626The program page has links and instructions on how to set up a development version of Bridge and point it at either the Ropsten deployment of the contracts or at a local network to play with the contracts and look for vulnerabilities.
2727
28−## Arvo is out of scope...for now
28+## Arvo is out of scope for now
2929
3030We’re intentionally focusing our security efforts on Azimuth for now. Since Azimuth serves as our PKI layer, it’s the most crucial for the time being: it’s the source of truth for who owns what. We don’t want to have even a shred of a doubt that these cryptographic properties are secure.
3131