# Scan Notes: Cosmos `ics23`

Date: 2026-02-15  
Repo: https://github.com/cosmos/ics23  
Program: HackerOne Cosmos (top-paying export)

## Quick Results

Semgrep (`p/security-audit` + `p/owasp-top-ten`):
- 0 findings

Trufflehog (filesystem, filtered, no verification):
- 1 false positive in `.git/packed-refs` (SonarCloud detector)