Mezo Portal

Off-Chain (Private)

Audited on 2024/06/08

No active critical issues

Summary

Mezo is a project focused on developing an "economic layer" for Bitcoin. The current audit report is concerning a Points Portal where users can deposit BTC to earn points. In order to participate in Mezo Portal, users are to deposit BTC on the Bitcoin network to an address determined by a script and its particular inputs. Following that, a process can be initiated that will result in TBTC being deposited into the `Portal` contract for a user-determined, protocol-constrained, pre-specified lock period. During this audit, we found an issue which results in a loss of security for the ECDSA being used to validate Bitcoin signed messages that enable the use of an admin function. Overall, the code quality was quite good. **Update**: The issues have been addressed.

Project

Mezo Portal

Ethereum

Issues (10)

	Low	Medium	High	Critical	Total
Not fixed	7	-	-	-	7
Fixed	2	1	-	-	3
Total	9	1	0	0	10

Contracts (7)

#	File Name
1	solidity/contracts/BitcoinDepositor.sol
2	thesis/orangekit/**
3	solidity/contracts/**
4	thesis/mezo-portal/**
5	keep-network/tbtc-v2/**
6	solidity/contracts/integrator/AbstractTBTCDepositor.sol
7	solidity/contracts/Portal.sol

#	File Name
1	solidity/contracts/BitcoinDepositor.sol
2	thesis/orangekit/**
3	solidity/contracts/**
4	thesis/mezo-portal/**
5	keep-network/tbtc-v2/**
6	solidity/contracts/integrator/AbstractTBTCDepositor.sol
7	solidity/contracts/Portal.sol

Mezo Portal

Summary

Issues (10)

`PUSH0` Remains Unsupported on some Blockchainsnot_fixed/low

Gas Savingsnot_fixed/low

Incompatible with Deflationary and Fee-on-Transfer Tokensnot_fixed/low

Inconsistent Event Emissionnot_fixed/low

Late Lock Period Validation May Lead to Stuck Fundsnot_fixed/low

Contracts (7)