Astra Nova

QuillAudits18 Jun 2024Files named in the report

Audit · firm’s term: audit report

QuillAudits reviewed Nova (Astra Nova) on 18 Jun 2024: 2 findings, 0 critical; all marked fixed.

No open critical findings

Open the report Open Nova’s security record

Report hosted on quillaudits.com.

Trustblock does not review code.

Findings2

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	0
Low	0	0	2

LowAvoid using floating pragmaFixed

Floating pragma should only be used when a contract is intended for consumption by other developers.Locking the pragma helps ensure that contracts are not accidentally deployed using, for example, the latest compiler, which may have higher risks of undiscovered bugs.

LowMissing gap variable for upgradeable contractsFixed

For upgradeable contracts, there must be a storage gap to “allow developers to freely add new state variables in the future without compromising the storage compatibility with existing deployments” (quote OpenZeppelin). Otherwise it may be very difficult to write new implementation code. Without a storage gap, the variable in the child contract might be overwritten by the upgraded base contract if new variables are added to the base contract. This could have unintended and very serious consequences to the child contracts, potentially causing loss of user funds or causing the contract to malfunction completely.Refer here: https://docs.openzeppelin.com/upgrades-plugins/1.x/writing-upgradeable