Security Audits
Completed: September 7, 2021
Conclusion: The assessment uncovered a number of potential issues which were resolved by the team. Two additional issues were acknowledged and largely mitigated by the team, and the original severities are no longer applicable. These upgrades to the Omnibridge provide additional functionality which will be implemented in the future.
Contracts: https://github.com/poanetwork/omnibridge
Audit Report
Completed: June 25, 2021
Conclusion: The assessment uncovered several issues which were addressed or acknowledged by the team. No "critical" severity security flaws preventing continued usage or launch of contracts in future contexts were found. 0 Critical Issues, 1 High Risk Issue Accepted, 4 Medium Issues Accepted/Acknowledged, 4 Low Risk Issues Accepted/Acknowledged.
Contracts: https://github.com/poanetwork/posdao-contracts
Audit Report in repo: https://github.com/poanetwork/posdao-contracts/blob/master/audit/ChainSecurity/report.pdf
Completed: April 27, 2021
Conclusion: 0 Critical or High Risk Issues, 2 Medium Issues Accepted, 3 Low Risk Issues Accepted/Acknowledged
Contracts: https://github.com/poanetwork/omnibridge
Completed: November 6, 2020
Conclusion: No high and medium risk issues found, all low risk issues addressed.
Contracts: Revised in version 5.5.0-rc0 to address audit. https://github.com/poanetwork/tokenbridge-contracts/releases/tag/5.5.0-rc0
Completed: August 3, 2020
Conclusion: All high/medium/low risk issues resolved.
Completed: January 8, 2020
Conclusion: All high risk issues resolved and low risk issues addressed. More information available in this post.
Contracts: Revised in version 3.3.0 to address audit. https://github.com/poanetwork/tokenbridge-contracts/releases/tag/3.3.0
Completed: June 24, 2020 Conclusion: No High or Medium risks, all low and informational risks addressed
In the original audit, the working name for the staking token was DPOS. This changed to STAKE.
DPOS Audit Completed: September 5, 2019 Conclusion: All risks resolved. Contracts: Version 1.0.1 addressed items in audit. https://github.com/xdaichain/stake-token/releases/tag/v1.0.1
The token constitutes a VFA in terms of Maltese law. Please contact [email protected] to request access to the document.
Completed: August 2019
Conclusion: All issues fixed or addressed. Due to scalability concerns, teams created a new methodology to accumulate and later “pull” their stakes and rewards instead of the “push” strategy as implemented in the audited version of the contracts.
Contracts: Version 0.1.0 addresses issues present in audit. https://github.com/poanetwork/posdao-contracts/releases/tag/v0.1.0
