dForce

Off-Chain (Private)

Audited on 2021/01/07

No active critical issues

Summary

Over the course of the assessment we have found a few medium and low-severity issues. Furthermore, we were unable to run tests in both repos despite following the steps indicated in the corresponding readme files. The project lacks proper specification and code documentation, and therefore it is impossible to assess the correctness of the provided code. We highly recommend addressing all these issues before proceeding with deployment of this project. **Update:** the team acknowledged most of the issues and informed us that the code has already been deployed. We were able to build and run USR tests but not USDx tests.

Project

dForce

Multi-Chain

Issues (12)

	Low	Medium	High	Critical	Total
Not fixed	8	3	-	-	11
Fixed	-	1	-	-	1
Total	8	4	0	0	12

Contracts (57)

#	File Name
51	contracts/storage/interfaces/IDFCollateral.sol
52	contracts/token/interfaces/IDSWrappedToken.sol
53	contracts/utility/DSNote.sol
54	contracts/converter/interfaces/IDFProtocol.sol
55	contracts/token/DSToken.sol
56	contracts/oracle/UniswapOracle.sol
57	contracts/utility/DSMath.sol

#	File Name
51	contracts/storage/interfaces/IDFCollateral.sol
52	contracts/token/interfaces/IDSWrappedToken.sol
53	contracts/utility/DSNote.sol
54	contracts/converter/interfaces/IDFProtocol.sol
55	contracts/token/DSToken.sol
56	contracts/oracle/UniswapOracle.sol
57	contracts/utility/DSMath.sol

dForce

Summary

Issues (12)

Fee Recipient Updatenot_fixed/medium

Pool Migrationnot_fixed/medium

Tokens that add rewards or take fees may lead to DoSnot_fixed/medium

Allowance Double-Spend Exploitnot_fixed/low

Clone-and-Ownnot_fixed/low

Contracts (57)