XDAO is a decentralized autonomous organization (DAO) framework built on the TON blockchain. It provides a comprehensive set of smart contracts enabling decentralized governance through token-based voting. The contracts are modular and easy to follow. Although basic tests cover simple happy paths, some customized contracts have introduced bugs and lack sufficient testing. We also encountered issues stemming from the complex message chaining inherent to TON’s architecture. We recommend that the team resolve these bugs and expand the test suite to include broader coverage and edge cases. **Fix Review Update:** The team has tried to fix most issues and suggestions, and we have verified that all findings are either fixed or acknowledged.
Low | Medium | High | Critical | Total | |
|---|---|---|---|---|---|
Not fixed | - | - | - | - | 0 |
Acknowledged | - | - | - | - | 0 |
Fixed | 2 | 8 | 4 | - | 14 |
| Total | 2 | 8 | 4 | 0 | 14 |
| # | File Name |
|---|---|
| 1 | Scope not recorded here: see the report |