UMA Across V2 Audit
Summary
Severity Issues 4 (4 resolved) Notes & Additional Information 7 (7 resolved) Scope We audited the across-protocol/contracts-v2 repository at the c01d48cdb2e72812b6b9780fe215d44faced50ba commit. In scope were the following contracts: contracts... contracts were not changed. The UMA team stated: All suggested comments are implemented except for zkSync contracts which were out of this audit's scope and are still in progress and not live. updatedRelayerFeePct can be lower than expected In the SpokePool contract, the speedUpDeposit function performs the following check on the updatedRelayerFeePct variable: require(updatedRelayerFeePct < 0.5e18, "invalid relayer fee");...
Issues (4)
Low | Medium | High | Critical | Total | |
|---|---|---|---|---|---|
Not fixed | - | - | - | - | 0 |
Fixed | 4 | - | - | - | 4 |
| Total | 4 | 0 | 0 | 0 | 4 |
Contracts (12)
| # | File Name |
|---|---|
| 1 | contracts/chain-adapters/Optimism_Adapter.sol |
| 2 | contracts/Boba_SpokePool.sol |
| 3 | contracts/BondToken.sol |
| 4 | contracts/Optimism_SpokePool.sol |
| 5 | contracts/chain-adapters/Succinct_Adapter.sol |
| 6 | contracts/Ethereum_SpokePool.sol |
| 7 | contracts/Succinct_SpokePool.sol |
| 8 | contracts/Ovm_SpokePool.sol |
| 9 | contracts/Polygon_SpokePool.sol |
| 10 | contracts/upgradeable/EIP712CrossChainUpgradeable.sol |