Saddle Finance VirtualSwap
Summary
This audit only pertains to the VirtualSwap `Bridge` and `SynthSwapper` contracts. The Saddle VirtualSwap contracts appear to be well-architected and properly documented. During our audit, several issues of ranging severity were uncovered, including a mismatch between the inline specification and code, as well as potential access-control issues. We recommend addressing all issues before deploying to mainnet. Inline documentation and tests are in general of high quality. We recommend adding coverage scripts for the VirtualSwap contracts, however we acknowledge that the mainnet dependency for this test suite makes this non-trivial. **Update:** all issues have been resolved as of commit [b0c731ce](https://github.com/saddle-finance/saddle-contract/commit/b0c731ce78137346b518b63732bef917fbae26ac).
Issues (5)
Low | Medium | High | Critical | Total | |
|---|---|---|---|---|---|
Not fixed | - | - | - | - | 0 |
Acknowledged | - | - | - | - | 0 |
Fixed | 4 | 1 | - | - | 5 |
| Total | 4 | 1 | 0 | 0 | 5 |