Cube3
Summary
Cube3 contracted the services of Resonance to conduct a comprehensive security audit of their smart contracts between February 12, 2024 and February 23, 2024. The primary objective of the assessment was to identify any potential security vulnerabilities and ensure the correct functioning of smart contract operations.The Cube3 Protocol is a security tool that implements RASP (Runtime Application Self-Protection) functionality for on-chain traffic. Web3 applications and smart contracts are protected from malicious activities through monitoring and filtering of incoming traffic, acting to some extent as a Web3 Application Firewall. Cube3's protocol has been the target of a major code overhaul, which resulted in a modernized, simpler, and more secure version of the protocol.The system can be deployed on multiple Ethereum-based chains and is best used with Cube3’s Risk API. It essentially comprises 4 important components, the customer’s integration registered to be protected by Cube3, the router used to forward protected traffic, the modules that different security functionality, and the on-chain registry which interfaces with Cube3’s Key Management System. The components are expected to be protected with required access control mechanisms and to communicate securely between themselves.As a general workflow, traffic sent to a customer’s registered application or smart contract is forwarded by the router to the specified module. This is accomplished with the usage of a secure payload retrieved off-chain, and then exchanged throughout the components of the system. At the end, verified payloads are eventually capable of validating or invalidating on-chain activities of customers users.
