# ZCode open-sourced on GitHub with third-party security audit results

Zhipu



ZCode WeChat post 2026-09-21 08:45: after security concerns, remediation complete and apology issued; client open-sourced at https://github.com/zai-org/ZCode with an ongoing bug bounty. States user code is not stored and was never used for training. CAICT and Sangfor audits confirm Alibaba Cloud OSS bucket zcode-prod empty/deleted; ZCode v3.14.0 removes Repo Wiki and cuts local-repo snapshot upload paths. Delivers the Sep 18 open-source + third-party audit pledge.

- Event date: Sep 21, 2026 08:45 Mon · Beijing Time (UTC+8)
- Review updated: Sep 21, 2026 09:19 Mon · Beijing Time (UTC+8)

## Sources

- zai-org/ZCode: https://github.com/zai-org/ZCode

Canonical entry: https://www.ailyre.com/source/?id=zcode-opensource-github-audit-2026-09-21&lang=en