mStable 1.

Off-Chain (Private)

Audited on 2020/06/30

No active critical issues

Summary

Executive Summary ConsenSys Diligence has conducted an audit of the mStable 1.1 protocol. mStable is a protocol for creating “meta assets” (mAssets) that are backed by baskets of tokenized assets of the same peg, such as stablecoins or commodities (referred to as “bAssets”). mAssets are always backed 1:1. bAssets supplied by users are automatically deposited into lending platforms (currently Aave and Compound). mAsset holders who stake in mStable’s SAVE contract earn 100% of the yield from lending platforms plus fees generated by users swapping between bAssets in the basket.

Project

mStable

Multi-Chain

Issues (15)

	Low	Medium	High	Critical	Total
Not fixed	10	2	-	-	12
Fixed	1	-	2	-	3
Total	11	2	2	0	15

Contracts (42)

#	File Name
41	contracts/rewards/staking/StakingTokenWrapper.sol
42	contracts/masset/forge-validator/IForgeValidator.sol

#	File Name
41	contracts/rewards/staking/StakingTokenWrapper.sol
42	contracts/masset/forge-validator/IForgeValidator.sol

mStable 1.

Summary

Issues (15)

Internal accounting of vault balance may diverge from actual token balance in lending poolnot_fixed/medium

Missing validation in Masset._redeemTonot_fixed/medium

Assumptions are made about Aave and Compound integrationsnot_fixed/low

Assumptions are made about bAssetsnot_fixed/low

Assumptions are made about interest distributionnot_fixed/low

Contracts (42)