This repository is a public registry of all the Tapioca Security and Testing engagements performed by leading security companies and elite white-hats. Any report out there that can't be found in this repository, should not be treated as an official document.
Below are the links to all audit reports and testing engagements done as a reflection of Tapiocas commitment to security.
| Auditor | Date | Duration | Scope | Description | Report |
|---|---|---|---|---|---|
| Hats Finance 2 | June 2024 | 10 days | Tapioca-bar | Review of the whole Tapioca-bar repo with focus on any possible hanging highs or mediums | Coming soon |
| Hats Finance 1 | May 2024 | 10 days | Tap-token, Pearlmit | Review of the whole Tap-token + Pearlmit repo with focus on any possible hanging highs or mediums including any issues introduced after the PermitC changes | Coming soon |
| 0xAdrii | May 2024 | 2 weeks | Tapioca-bar | Review of the whole Tapioca-bar repo + focus on core structural issues | Report |
| Trumpero & Duc | May 2024 | 2 weeks | Tapioca-bar | Review of the whole Tapioca-bar repo + focus on core structural issues | Report |
| CarrotSmuggler | May 2024 | 10 days | Magnetar | Final check-up in Magnetar after 5 reviews. | Coming soon |
| CarrotSmuggler | May 2024 | 1 week | Pearlmit | Last check-up in Pearlmit including changes from PermitC security review | Coming soon |
| Deadrosesxyz | May 2024 | 5 days | Magnetar | Audit of Magnetar after dropping the Omnichain operations for a first version launch | Coming soon |
| Deadrosesxyz | May 2024 | 3 days | Oracles, Strategies, Leverage Executors, Pearlmit | Review of targetted points of the codebase that had been less looked at | Coming soon |
| Windhustler | May 2024 | 1 week | TapiocaZ | Overall review of all the LayerZero intereactions on Tapioca, not only on TapiocaZ | Report |
| CarrotSmuggler | May 2024 | 10 days | Tap-token | Last Private review on tap-token as it has been very strongly reviewed, specially with the last Spearbit and c4 reviews | Coming soon |
| 0xAdrii | April 2024 | 10 days | Magnetar | Review focused on Magnetar given the results from the public contests | Report |
| GalloDaSballo | April 2024 | 1 week | Magnetar | Fix review of all the issues from Sherlock and Code4rena + full review of Magnetar + invariant recommendations | Coming soon |
| Sherlock | Feb 2024 | 3 weeks | Tapioca-bar, TapiocaZ | Strategic public audit in paralel with Code4rena of the Lending and Omnichain engine. Key review that would lay the path for the final security pipeline | Report |
| Code4rena | Feb 2024 | 3 weeks | Tapioca-periph, Tap-token | Strategic public audit in paralel with Sherlock of the periphery and Tap-token. Key review that would lay the path for the final security pipeline | Report |
| PashovGroup | Feb 2024 | 1 week | Pearlmit, Strategies, Leverage Executors | Review of targetted points of the codebase that have been less looked at | Report |
| PashovGroup | Dec 2023 | 1 month | Magnetar, Oracles, Swappers | Strategic review of Magnetar, Oracles and currently deprecated swappers together with 0xWeiss | Report |
| 0xWeiss | Dec 2023 | 1 month | Magnetar, Oracles, Swappers | Strategic review of Magnetar, Oracles and currently deprecated swappers together with Pashov Audit Group | Report |
| Spearbit | Nov 2023 | 9 weeks | Tapioca-bar, TapiocaZ, Tapioca-periph | Target review of 85% of the protocol focused on hardening all the core logic of the main repositories. Main entry point to a new security pipeline | Report |
| Code4rena | July 2023 | 1 month | Tap-token, TapiocaZ, Tapioca-periph, Yieldbox, Yieldbox-strategies | Initial review of 85% of the protocol | Report |
| Fuzzing Engineer | Date | Duration | Scope | Description | Report |
|---|---|---|---|---|---|
| EnigmaDark (Victor Martinez) | April 2024 | 3 weeks | Tapioca-bar | Invariant suite performed in the Lending part of the protocol. Composed of over 70 invariants | Coming soon |
| Engineer | Date | Duration | Scope | Description | Report |
|---|---|---|---|---|---|
| Certora | April 2023 | 2 months | Yieldbox | Formal verification engagement trying to proof Yieldbox code | Report |
| Tester | Date | Duration | Scope | Description | Report |
|---|---|---|---|---|---|
| Perimeter (Nican0r) | May 2024 | 2 weeks | Yieldbox-Strategies | Fork testing Glp and sDai Strategies | Coming soon |
| Perimeter (Nican0r) | June 2024 | 10 days | Tap-token | Unit testing the tap-token repo with focus on twTAP and twAML | Coming soon |
| 0xRazine | June 2024 | 10 days | Pearlmit | Unit testing of Pearlmit | Coming soon |