Table of Contents Table of Contents Summary Scope System Overview Security Model and Trust AssumptionsPrivileged Roles Low SeverityIncomplete Docstrings Optimization for PRIMARY_FACTOR_ADDRESS and PRIMARY_CONDITIONAL_MULTIPLIER_ADDRESS Checks Floating Pragma Notes & Additional InformationAmbiguous Call to Parent Contract Functions Updating State Without Event Emissions Lack of Indexed Event Parameters Post-EIP-6780 selfdestruct Does Not Delete Code Indecisive Licenses Unnecessary Data Field i...| OpenZeppelin Blog
Table of Contents Table of Contents Summary Scope System Overview Privileged Roles and Trust Assumptions Medium SeverityExcess Gas Remains in SpokePool Fee Cap May Be Too Low Conclusion| OpenZeppelin Blog
Table of Contents Table of Contents Summary Scope System OverviewNew Contracts Diff Changes Security Model and Trust Assumptions Low SeverityCurrencies Do Not Accept a Bond By Default The RequestManagerAdded and RequestManagerRemoved Events Can Be Wrongfully Emitted Missing Interface Validation for Whitelist Contracts Missing Test Suite Problematic Whitelist Implementation Minimum Liveness Can Be Set Beyond Valid Bounds Notes & Additional InformationUse of Storage Gaps for Upgradeability Inco...| OpenZeppelin Blog
| Open Source Security Foundation
Table of Contents Table of Contents Summary Scope System OverviewPEG-IN Process PEG-OUT Process Security Model and Trust AssumptionsPrivileged Roles High SeverityMalicious Owner Can Mint Wrapped BTC From Arbitrary Bitcoin Transactions Medium SeverityPotential Loss of Wrapped BTC Malicious Owner Can Mint to a Random Recipient Low SeverityFunctions Updating State Without Event Emissions Missing Docstrings Potential Loss of Ownership During Transfers Missing _disableInitializers Notes & Addition...| OpenZeppelin Blog
Table of Contents Table of Contents Summary Scope System OverviewCore Mechanisms Price Oracles Asset Management Security Model and Trust AssumptionsPrivileged Roles By Contract Critical SeverityAttacker can Lock User Funds through Redeem Function High SeverityFlashloan Functionality is Blocked Pools Can Be Subject to Price Manipulation Leading to Early Liquidations or Arbitrage Medium SeverityFlashloan Functionality Does Not Follow ERC-3156 Standard Redemption Waiting Can Be Gamed Pool at Cap...| OpenZeppelin Blog
VIS-DEI Token Security Audit Report Are Your Funds Safe? Our expert team at Callisto Network has conducted an in-depth security audit of the VIS-DEI smart contract. This audit aims to ensure the security of your funds by identifying and assessing any potential vulnerabilities. Here, we present our findings: [...] The post VIS-DEI Security Audit Report v3 appeared first on Callisto Network.| Callisto Network
Enduracoin Token Security Audit Report Are Your Funds Safe? Our expert team at Callisto Network has conducted an in-depth security audit of the Enduracoin Token smart contract. This audit aims to ensure the security of your funds by identifying and assessing any potential vulnerabilities. Here, we present our findings: [...] The post Enduracoin Token – Security Audit Report appeared first on Callisto Network.| Callisto Network
Security audit report of USDC (USD Coin) by Callisto Network. We identify vulnerabilities to ensure fund safety. Explore our findings & recommendations.| Callisto Network
We audited the Fantom-foundation/Bridge repository at commit 558465d. Smart Contract Audit.| blog.openzeppelin.com
We audited the Fantom-foundation/Opera-Bridge repository at commit 730e10b3. Smart Contract Audit.| blog.openzeppelin.com