The Augur team asked us to review and audit a number of components of the Augur Core v2 project. We looked at the code and now publish our results. The audited commit is 67c0fec95e65fca8d27751f28a6c06e5247978c6 and only the following Solidity smart contracts were included in the audit’s scope... affiliates system. Augur’s implementation of EIP 1155. Note that we did not audit the EIP on its own, but only compared Augur’s implementation against the official specification. Additionally, we included the Market contract for completeness, as it suffered changes related to the audited features...
Low | Medium | High | Critical | Total | |
---|---|---|---|---|---|
Not fixed | - | - | 1 | - | 1 |
Fixed | 11 | 4 | 3 | 1 | 19 |
Total | 11 | 4 | 4 | 1 | 20 |
# | File Name |
---|---|
1 | packages/augur-core/source/contracts/libraries/token/ERC1155.sol |
2 | packages/augur-core/source/contracts/AffiliateValidator.sol |
3 | packages/augur-core/source/contracts/GnosisSafe.sol |
4 | packages/augur-core/source/contracts/0x/erc1155/contracts/src/ERC1155.sol |
5 | packages/augur-core/source/contracts/IWarpSync.sol |
6 | packages/augur-core/source/contracts/WarpSync.sol |
7 | packages/augur-core/source/contracts/libraries/Initializable.sol |
8 | packages/augur-core/source/contracts/libraries/token/ERC1155Holder.sol |
9 | packages/augur-core/source/contracts/libraries/token/ERC1155Receiver.sol |
10 | packages/augur-core/source/contracts/ProxyFactory.sol |