UMA Across V2 Audit

Off-Chain (Private)

Audited on 2024/01/04

No active critical issues

Summary

Severity Issues 4 (4 resolved) Notes & Additional Information 7 (7 resolved) Scope We audited the across-protocol/contracts-v2 repository at the c01d48cdb2e72812b6b9780fe215d44faced50ba commit. In scope were the following contracts: contracts... contracts were not changed. The UMA team stated: All suggested comments are implemented except for zkSync contracts which were out of this audit's scope and are still in progress and not live. updatedRelayerFeePct can be lower than expected In the SpokePool contract, the speedUpDeposit function performs the following check on the updatedRelayerFeePct variable: require(updatedRelayerFeePct < 0.5e18, "invalid relayer fee");...

Project

Across Protocol

Multi-Chain

	Low	Medium	High	Critical	Total
Not fixed	-	-	-	-	0
Fixed	4	-	-	-	4
Total	4	0	0	0	4

Contracts (12)

#	File Name
1	contracts/chain-adapters/Optimism_Adapter.sol
2	contracts/Boba_SpokePool.sol
3	contracts/BondToken.sol
4	contracts/Optimism_SpokePool.sol
5	contracts/chain-adapters/Succinct_Adapter.sol
6	contracts/Ethereum_SpokePool.sol
7	contracts/Succinct_SpokePool.sol
8	contracts/Ovm_SpokePool.sol
9	contracts/Polygon_SpokePool.sol
10	contracts/upgradeable/EIP712CrossChainUpgradeable.sol

#	File Name
1	contracts/chain-adapters/Optimism_Adapter.sol
2	contracts/Boba_SpokePool.sol
3	contracts/BondToken.sol
4	contracts/Optimism_SpokePool.sol
5	contracts/chain-adapters/Succinct_Adapter.sol
6	contracts/Ethereum_SpokePool.sol
7	contracts/Succinct_SpokePool.sol
8	contracts/Ovm_SpokePool.sol
9	contracts/Polygon_SpokePool.sol
10	contracts/upgradeable/EIP712CrossChainUpgradeable.sol

UMA Across V2 Audit

Summary

Issues (4)

Contracts (12)