Extropy was contracted to conduct an initial code review and vulnerability assessment of the Pwn protocol written in cairo for starknet. The solidity version of the protocol was already audited by extropy in May 2024.
Low | Medium | High | Critical | Total | |
|---|---|---|---|---|---|
Not fixed | 4 | 2 | - | - | 6 |
Fixed | 6 | - | 1 | - | 7 |
| Total | 10 | 2 | 1 | 0 | 13 |
| # | Github Repository | Commit Hash | File | Url |
|---|---|---|---|---|
| 1 | NethermindEth/pwn-starknet | 02b82af8eef699e9999dc4890dc979f75ea930ec | src/hub/pwn_hub.cairo | Check on Github |
| 2 | NethermindEth/pwn-starknet | 02b82af8eef699e9999dc4890dc979f75ea930ec | src/nonce/revoked_nonce.cairo | Check on Github |
| 3 | NethermindEth/pwn-starknet | 02b82af8eef699e9999dc4890dc979f75ea930ec | src/loan/terms/simple/loan/pwn_simple_loan.cairo | Check on Github |
| 4 | NethermindEth/pwn-starknet | 02b82af8eef699e9999dc4890dc979f75ea930ec | src/loan/token/pwn_loan.cairo | Check on Github |
| 5 | NethermindEth/pwn-starknet | 02b82af8eef699e9999dc4890dc979f75ea930ec | src/multitoken/library.cairo | Check on Github |
| 6 | NethermindEth/pwn-starknet | 02b82af8eef699e9999dc4890dc979f75ea930ec | src/loan/lib/merkle_proof.cairo | Check on Github |
| 7 | NethermindEth/pwn-starknet | 02b82af8eef699e9999dc4890dc979f75ea930ec | src/loan/terms/simple/loan/types.cairo | Check on Github |
| 8 | NethermindEth/pwn-starknet | 02b82af8eef699e9999dc4890dc979f75ea930ec | src/loan/lib/math.cairo | Check on Github |
| 9 | NethermindEth/pwn-starknet | 02b82af8eef699e9999dc4890dc979f75ea930ec | src/loan/lib/serialization.cairo | Check on Github |
| 10 | NethermindEth/pwn-starknet | 02b82af8eef699e9999dc4890dc979f75ea930ec | src/loan/terms/simple/proposal/simple_loan_proposal.cairo | Check on Github |
