NetMind
Summary
NetMind is a distributed computing platform that facilitates the rental of idle GPUs. To support the payment of GPU rentals, NetMind deployed its own EVM blockchain, called NetMind chain, and an on-chain protocol allowing users to pay their rental debts with the native token NMT. The on-chain protocol is managed by a group of authorized nodes that execute the movement of user funds, perform updates to the protocol state, and vote on proposals determining how protocol funds are utilized. Users can purchase wrapped NMT tokens on Ethereum and Binance Smart Chain and bridge their tokens to the NetMind chain via the `CrossChain` contract. Users can fund their accounts once on the NetMind chain and stake their NMT tokens to accrue potential rewards. During the audit, we found 25 issues, ranging from informational to high severity. Recurring issues have been high code complexity, centralization of power, missing slippage protection, and exploitable proposals. We found that creating a comprehensive test suite and thorough code documentation would significantly improve overall code quality. Additionally, we identified 18 auditor suggestions, mainly regarding adherence to best practices and recommendations to improve code readability and quality. **Update**: The NetMind team fixed or acknowledged all issues listed in this report. During the fix review, the audit team identified a new issue, NETM-25, where the incorrect token is refunded to the caller; the NetMind team fixed the issue by removing the problematic line of code. The audit team still recommends improving project documentation and adding a test suite to the project repository.
Issues (25)
Low | Medium | High | Critical | Total | |
|---|---|---|---|---|---|
Not fixed | 8 | 5 | 2 | - | 15 |
Fixed | 4 | 3 | 3 | - | 10 |
| Total | 12 | 8 | 5 | 0 | 25 |