Celo Contrac Security Smart Contract Audit

Summary

phases. After a fifth phase of auditing, the cLabs team asked us to review and audit the recent changes in the smart contracts and verification scripts of their protocol. Scope The audited commit for this phase was 0e876e5cad0e93f5dd1fff853f4be3c9a0e5c2a7 of the Celo Monorepo. This commit has...

Project

Celo

Ethereum

No active critical issues

Last audited on 2022/06/16

Auditor

215 audits on Trustblock

Multi-Tags

Issues (94)

	Low	Medium	High	Critical	Total
Not fixed	2	4	-	-	6
Fixed	64	18	4	2	88
Total	66	22	4	2	94

Contracts (23)

#	File Name
11	packages/protocol/contracts/baklava/Freezable.sol
12	packages/protocol/contracts/identity/interfaces/IRandom.sol
13	packages/protocol/contracts/governance/SlasherUtil.sol
14	packages/protocol/contracts/governance/Proposals.sol
15	packages/protocol/contracts/identity/Attestations.sol
16	packages/protocol/contracts/common/FractionUtil.sol
17	packages/protocol/contracts/common/UsingPrecompiles.sol
18	packages/protocol/contracts/stability/Reserve.sol
19	packages/protocol/contracts/governance/Governance.sol
20	packages/protocol/contracts/governance/LockedGold.sol

Celo Contracts Audit

Summary

Issues (94)

[M01] Expired attestations lock fundsnot_fixed/medium

[M01] Mint and burn functionalities can breaknot_fixed/medium

[M01] Multiple iterations of the same transfer can occurnot_fixed/medium

[M02] Data lengths alteration could lead to malicious transaction executionsnot_fixed/medium

[L03] Downtime slash is frontrunnablenot_fixed/low

Contracts (23)