BitMessage doesn't have good enough of a specification for a proper Audit, even the code is apparently changing very rapidly. I started a thread on their forum addressing some concerns I have with it, apparently some of my concerns are not issues because of unspecified behavior protecting from them though. https://bitmessage.org/forum/index.php/topic,1666.0.html