Paxos
Off-Chain (Private)
Audited on 2020/10/31
No active critical issues
Summary
Executive Summary In November 2020, we conducted a security assessment of Paxos’s multisig wallet contract. This wallet is based on Christian Lundkvist’s SimpleMultiSig contract, which we previously reviewed. Paxos’s modification allows the set of owners to be changed after the wallet is deployed. This report focuses on the impact of those changes. We performed this assessment between November 7th and November 10th, 2020. The engagement was primarily conducted by Steve Marx.
Issues (5)
Low | Medium | High | Critical | Total | |
|---|---|---|---|---|---|
Not fixed | - | - | - | - | 0 |
Fixed | 4 | - | - | 1 | 5 |
| Total | 4 | 0 | 0 | 1 | 5 |
Owners can never be removed
fixed/critical
No description
Convert DOMAIN_SEPARATOR to be immutable ✓
fixed/low
No description
Convert the assembly call to Solidity ✓
fixed/low
No description
Update comments about state mutability ✓
fixed/low
No description
Update to a more recent version of the Solidity compiler ✓
fixed/low
No description
Contract (1)
| # | File Name |
|---|---|
| 1 | Unknown Contract |