BonusBlock
Summary
Bonusblock contracted the services of Resonance to conduct a comprehensive security audit of their smart contracts between March 27, 2024 and April 3, 2024. The primary objective of the assessment was to identify any potential security vulnerabilities and ensure the correct functioning of smart contract operations.The audited system comprises a set of repositories containing multiple smart contracts, that implement various staking capabilities for BonusBlock. Two of the repositories are more relevant as they implement, firstly, a vault with the possibility of registering campaigns, staking, funding, and distributing tokens, and secondly, a staking contract with locking and vesting of rewards in block time slots.There are also other contracts that implement a custom ERC20 token with fixed supply, an ERC721 token mintable with signature verification capabilities, a spotlight that keeps track of payments to beneficiaries, and an improved staking subscription with canceling capabilities.Off-chain components further include public key and signature generation utilities that will be used and verified during on-chain transactions.
Issues (11)
Low | Medium | High | Critical | Total | |
|---|---|---|---|---|---|
Not fixed | 3 | - | - | - | 3 |
Acknowledged | - | - | - | - | 0 |
Fixed | 4 | 2 | 1 | 1 | 8 |
| Total | 7 | 2 | 1 | 1 | 11 |