InstaDApp Audit

Off-Chain (Private)

Audited on 2019/09/17

No active critical issues

Summary

to another account. It also gives the admins of the InstaRegistry contract the ability to change the InstaRegistry admin addresses and register other privileged roles. Audit context and scope InstaDapp is a live project on Ethereum’s mainnet. The code we audited is the code located at the address... 0x498b3bfabe9f73db90d252bcd4fa9548cd0fd981, as verified by Etherscan. This consists of the two top-level contracts: UserWallet and InstaRegistry. We audited these two contracts and the contracts from which they inherit. The InstaRegistry contract is used to deploy new UserWallet instances, track...

Project

Instadapp

Ethereum

Issues (15)

	Low	Medium	High	Critical	Total
Not fixed	9	6	-	-	15
Fixed	-	-	-	-	0
Total	9	6	0	0	15

Contracts (3)

#	File Name
1	flats/InstaRegistry.sol
2	contracts/UserWallet.sol
3	contracts/InstaRegistry.sol

#	File Name
1	flats/InstaRegistry.sol
2	contracts/UserWallet.sol
3	contracts/InstaRegistry.sol

InstaDApp Audit

Summary

Issues (15)

Admin/Owner roles may be burned by mistakenot_fixed/medium

Logging a memory pointer instead of the actual datanot_fixed/medium

Transfer of wallet ownership can be DoSed — Method 1not_fixed/medium

Transfer of wallet ownership can be DoSed — Method 2not_fixed/medium

Undocumented assembly blocksnot_fixed/medium

Contracts (3)