In October 2024, Ephemera engaged NCC Group to perform a security assessment of libxmtp, their Rust implementation of the Extensible Message Transport Protocol (XMTP), built upon Messaging Layer Security (MLS) in a Web3 environment, where users leverage their existing blockchain-based identities for authentication.
The application is underpinned by OpenMLS and provides a custom authentication service as described in XIP-46, which establishes a framework for associating multiple wallet addresses with a single self-managed identity.