As BON (Build On Nexa) expands developer access to the Nexa ecosystem, independently validated SDK security helps protect wallets, dApps, and enterprise integrations built on top of it.
Hashlock, a leading Web3 security company, has completed an independent security audit of libnexa-ts, Nexa’s open source TypeScript/JavaScript SDK designed for applications that interface directly with the Nexa network. Following the audit and remediation process, Hashlock has assigned libnexa-ts a security rating of “Secure”, indicating that the reviewed code base is robust and suitable for production use.
Development tools are the foundation of every ecosystem. When an SDK is used on wallets, payment processors, exchanges, and dApps, ensuring security at the library level becomes a multiplier for the overall security of the ecosystem. This is especially important as Nexa continues to expand its developer onboarding initiatives through BON (Build On Nexa), its official builder program and documentation center for developers building apps, tools, and services on Nexa.
What is libnexa-ts?
libnexa-ts is a developer SDK that allows TypeScript and JavaScript applications to interact with the Nexa network using a trusted open source codebase. The library supports modern developer workflows and can be installed via npm, with documentation covering core modules and practical integration patterns. The SDK is designed for both server-side Node.js environments and modern browsers, supporting a wide range of application types, from web apps and wallets to backend services and smart contract interactions.
Audit Overview
Hashlock’s audit focused on the libnexa-ts codebase (Nexa SDK), using a manual line-by-line review supported by software-assisted testing. The assessment evaluated the security and effectiveness of the audited repository and validation baseline, with a focus on accuracy, reliability, and prevention of downstream integration risks for developers and end users.
The final audit report indicates that Hashlock identified a high severity issue as well as additional quality assurance items during the review process. After remediation, the final assessment confirms that all initially identified vulnerabilities have been resolved, allowing the SDK to receive a “Secure” rating.
What a “secure” rating means
Hashlock’s security assessment system is designed to provide clear guidance on deployment readiness and risk posture. A “Secure” rating indicates that the audited codebase is suitable for production deployment based on the scope reviewed and that the identified issues have been resolved. Hashlock also notes that ratings lower than “Secure” should not be deployed, while the separate “Hashlocked” designation is reserved for projects that invest in ongoing security measures beyond an initial audit, such as monitoring or bug bounty programs.
On Nexa
Nexa is a UTXO Layer-1 proof-of-work blockchain designed for high-throughput applications and scalable peer-to-peer financing. The Nexa ecosystem supports native token services and smart contract capabilities, allowing developers to build decentralized applications and automate complex transactions directly on-chain. Nexa’s broader vision is supported by BON (Build On Nexa), which outlines developer resources and a growing suite of ecosystem libraries for building everything from payment apps and merchant integrations to in-game economies, provenance tracking, and tokenized assets.
Why it matters for builders
As Web3 evolves toward real scale, developer tools become a critical part of the security perimeter. Auditing core SDK infrastructure like libnexa-ts helps reduce the risk of systemic bugs propagating across multiple applications, builds trust among ecosystem partners, and improves security for end users interacting with wallets, dApps, and other integrations built on Nexa.
Hashlock audit page (Nexa / libnexa-ts):
Documentation/Resources:
libnexa-ts documentation:
libnexa-ts GitLab repository:
BON Documentation Center (Build On Nexa):
Nexa website:
Unlimited Bitcoin:
About Hashlock
Hashlock is a leading Web3 security company specializing in manual smart contract audits, blockchain protocol reviews, and cybersecurity services across multiple ecosystems. Hashlock security researchers work with builders to identify vulnerabilities, strengthen code quality, and support more secure deployments across DeFi, infrastructure, gaming, and enterprise use cases.
Website:
X:
About Nexa / Bitcoin Unlimited
Nexa is developed as part of the Bitcoin Unlimited organization, which focuses on advancing scalable peer-to-peer money through protocol innovation, research, and community collaboration. Bitcoin Unlimited’s work spans multiple blockchain implementations, including previous work on Bitcoin Cash client infrastructure and the continued development of Nexa as a next-generation UTXO Layer-1 blockchain.
Nexa website:
Unlimited Bitcoin:
