Origin Dollar Audit

Off-Chain (Public)

Audited on 2021/10/25

No active critical issues

Summary

The Origin Protocol team asked us to review and audit their Origin Dollar smart contracts. We looked at the code and now publish our results.... The Origin Protocol team asked us to review and audit their Origin Dollar smart contracts. We looked at the code and now publish our results. Scope We audited commit bf4ff28d5944ecc277e66294fd2c702fee5cd58b of the Origin-Dollar repository. The scope includes all files in the following directories...

Project

Origin Protocol

Multi-Chain

Issues (30)

	Low	Medium	High	Critical	Total
Not fixed	7	-	-	-	7
Fixed	12	5	5	1	23
Total	19	5	5	1	30

Contracts (4)

#	Github Repository	Commit Hash	File	Url
1	OriginProtocol/origin-dollar	bf4ff28d5944ecc277e66294fd2c702fee5cd58b	contracts/contracts/vault/VaultAdmin.sol	Check on Github
2	OriginProtocol/origin-dollar	bf4ff28d5944ecc277e66294fd2c702fee5cd58b	contracts/contracts/vault/VaultCore.sol	Check on Github
3	OriginProtocol/origin-dollar	bf4ff28d5944ecc277e66294fd2c702fee5cd58b	contracts/contracts/oracle/ChainlinkOracle.sol	Check on Github
4	OriginProtocol/origin-dollar	bf4ff28d5944ecc277e66294fd2c702fee5cd58b	contracts/contracts/oracle/MixOracle.sol	Check on Github

#	Github Repository	Commit Hash	File	Url
1	OriginProtocol/origin-dollar	bf4ff28d5944ecc277e66294fd2c702fee5cd58b	contracts/contracts/vault/VaultAdmin.sol	Check on Github
2	OriginProtocol/origin-dollar	bf4ff28d5944ecc277e66294fd2c702fee5cd58b	contracts/contracts/vault/VaultCore.sol	Check on Github
3	OriginProtocol/origin-dollar	bf4ff28d5944ecc277e66294fd2c702fee5cd58b	contracts/contracts/oracle/ChainlinkOracle.sol	Check on Github
4	OriginProtocol/origin-dollar	bf4ff28d5944ecc277e66294fd2c702fee5cd58b	contracts/contracts/oracle/MixOracle.sol	Check on Github

Origin Dollar Audit

Summary

Issues (30)

[L03] Residual token allowancenot_fixed/low

[L08] Simplify redeem outputs calculationnot_fixed/low

[L09] Mixing testing and production codenot_fixed/low

[L12] Function selectors between VaultCore and VaultAdmin could collidenot_fixed/low

[L16] Lack of indexed parameters in eventsnot_fixed/low

Contracts (4)