According to official news, Worldcoin released the Orb privacy and security audit report, which was completed by Trail of Bits.
Three consultants conducted a total of six engineering weeks of review. The auditors were given full source code access, as well as runtime access to the two evaluated Orbs. The report describes potential attack surfaces (TOB-ORB-4, TOB-ORB-5, TOB-ORB-10, and TOB-ORB-11), but they concluded that "our analysis did not find vulnerabilities in the Orb code that could be directly exploited that are related to the described project goals." In addition, although Trail of Bits' review found some unconfirmed issues that could theoretically affect the project goals, and the affected code has been updated, the audit did not find any instances that directly affected the project goals, either through known vulnerabilities or during normal execution.