zkNoid Audit
Summary
Extropy was contracted to conduct an initial code review and vulnerability assessment of the l1-lottery protocol. The protocol, deployed on the Mina blockchain, aims to allow users to play a lottery game where users are able to buy tickets for a certain lottery round choosing a combinations of six numbers from 1 to 9. Each round winning combination will be generated using a seed retrieved from a component that interacts with an external oracle. Users tickets that match at least one number from the winning combination are eligible to claim the reward a share of the treasury, which holds the amount paid by users for tickets of that round, can be withdrawn. If for any reason, the result is not finalized from the oracle in 2 days after the round ended, ticket owners can ask for refunds. In the initial report, 21 security issues were discovered and explained, with recommendations for their resolution.
Issues (9)
Low | Medium | High | Critical | Total | |
|---|---|---|---|---|---|
Not fixed | 2 | 1 | - | - | 3 |
Acknowledged | - | - | - | - | 0 |
Fixed | 2 | 3 | 1 | - | 6 |
| Total | 4 | 4 | 1 | 0 | 9 |