iExec PoCo

ConsensysFiles named in the report

Audit

Consensys reviewed iExec (iExec PoCo) on 1 Mar 2020: 7 findings, 0 critical; none marked fixed.

No open critical findings
Open the reportOpen iExec’s security record

Report hosted on diligence.security.

Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium400
Low300
MediumDomain separator in iExecMaintenanceDelegate has a wrong version fieldOpen

The report gives no description here.

MediumimportScore() in IexecMaintenanceDelegate can be used to wrongfully reset worker scoresOpen

The report gives no description here.

MediumOutdated documentationOpen

The report gives no description here.

MediumSystem deployer is fully trusted in this version of the PoCo systemOpen

The report gives no description here.

LowLimit the length of task.contributors to prevent reaching gasBlockLimitOpen

The report gives no description here.

LowPermissionless nature of proxy factory might cause confusion when parsing eventsOpen

The report gives no description here.

LowThe updateContract() method in ERC1538UpdateDelegate is incorrectly implementedOpen

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (48)

  • poco-dev/contracts/IexecInterfaceNative.sol
  • poco-dev/contracts/tools/testing/TestReceiver.sol
  • poco-dev/contracts/tools/testing/TestClient.sol
  • poco-dev/contracts/Store.sol
  • poco-dev/contracts/tools/Migrations.sol
  • poco-dev/contracts/modules/interfaces/IexecMaintenance.sol
  • poco-dev/contracts/registries/datasets/DatasetRegistry.sol
  • poco-dev/contracts/modules/delegates/IexecAccessorsABILegacyDelegate.sol
  • poco-dev/contracts/modules/interfaces/IexecAccessorsABILegacy.sol
  • poco-dev/contracts/modules/delegates/IexecERC20Delegate.sol
  • poco-dev/contracts/registries/apps/App.sol
  • poco-dev/contracts/modules/delegates/IexecERC20Common.sol
  • poco-dev/contracts/modules/interfaces/IexecERC20.sol
  • poco-dev/contracts/registries/workerpools/WorkerpoolRegistry.sol
  • poco-dev/contracts/modules/interfaces/IexecOrderManagement.sol
  • poco-dev/contracts/modules/delegates/IexecOrderManagementDelegate.sol
  • poco-dev/contracts/modules/delegates/IexecCategoryManagerDelegate.sol
  • poco-dev/contracts/modules/interfaces/IexecCategoryManager.sol
  • poco-dev/contracts/libs/IexecLibCore_v5.sol
  • poco-dev/contracts/registries/Registry.sol
  • poco-dev/contracts/modules/delegates/IexecRelayDelegate.sol
  • poco-dev/contracts/modules/interfaces/IOwnable.sol
  • poco-dev/contracts/modules/interfaces/IexecRelay.sol
  • poco-dev/contracts/registries/RegistryEntry.sol
  • poco-dev/contracts/modules/delegates/SignatureVerifier.sol
  • poco-dev/contracts/modules/interfaces/ENSIntegration.sol
  • poco-dev/contracts/registries/apps/AppRegistry.sol
  • poco-dev/contracts/modules/interfaces/IexecEscrowToken.sol
  • poco-dev/contracts/IexecInterfaceTokenABILegacy.sol
  • poco-dev/contracts/modules/DelegateBase.sol
  • poco-dev/contracts/modules/interfaces/IexecMaintenanceExtra.sol
  • poco-dev/contracts/modules/delegates/IexecEscrowNativeDelegate.sol
  • poco-dev/contracts/IexecInterfaceToken.sol
  • poco-dev/contracts/modules/delegates/ENSIntegrationDelegate.sol
  • poco-dev/contracts/modules/delegates/IexecPocoDelegate.sol
  • poco-dev/contracts/modules/delegates/IexecEscrowTokenDelegate.sol
  • poco-dev/contracts/modules/interfaces/IexecEscrowNative.sol
  • poco-dev/contracts/registries/IRegistry.sol
  • poco-dev/contracts/modules/delegates/IexecMaintenanceDelegate.sol
  • poco-dev/contracts/IexecInterfaceNativeABILegacy.sol
  • poco-dev/contracts/libs/IexecLibOrders_v5.sol
  • poco-dev/contracts/modules/interfaces/IexecAccessors.sol
  • poco-dev/contracts/registries/workerpools/Workerpool.sol
  • poco-dev/contracts/modules/interfaces/IexecPoco.sol
  • poco-dev/contracts/modules/delegates/IexecMaintenanceExtraDelegate.sol
  • poco-dev/contracts/modules/delegates/IexecAccessorsDelegate.sol
  • poco-dev/contracts/registries/datasets/Dataset.sol
  • poco-dev/contracts/modules/interfaces/IexecTokenSpender.sol

Part of iExec’s security record

iExec
Audits6 audits by 4 firmsLast audit Jul 2025, by Halborn.
Critical findingsNo open critical findingsAcross 6 reports.
Open iExec’s security record

Security firm

Consensys

41 projects reviewed · 59 reports · latest Oct 2024

See Consensys’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us