RTLabs

Resonance Security7 Feb 2025Code version: not recorded (see the report)

Audit · firm’s term: audit report

Resonance Security reviewed RTLabs on 7 Feb 2025: 2 findings, 0 critical; none marked fixed.

No open critical findings

Open the report Open RTLabs’s security record

Report stored on IPFS. Content hash QmS49HTQqs2Bba4U5fE5BgnJ1nvFjBj6w6KhpwTxztdB5L

Trustblock does not review code.

Findings2

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	0
Low	2	0	0

LowDead CodeOpen

Throughout the source code there are multiple instances that lead to a dead end as unimplemented features and functionalities are never reached. These should be cleaned up to increase the quality of the code and decrease the bytecode stored on the blockchain.

LowHardcoded Pubkeys Problematic On Immutable ProgramsOpen

The program specifies accounts that possess validations against constant public keys. These keys cannot be changed unless there is a redeployment of the program into the blockchain. In cases where the accounts related to these public keys become rogue or compromised, the program and users interacting with it may be at risk. This is especially problematic when Solana programs are removed of its update authority and become immutable.It should be noted that this finding was introduced due to the lack of a deployment script for the program, and as such, should be considered a recommendation for best practices.