forked from gnosischain/documentation
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
add xDAI bridge upgrade audit report by Omega
- Loading branch information
1 parent
67bb85a
commit d56248f
Showing
3 changed files
with
58 additions
and
44 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,43 +1,57 @@ | ||
| --- | ||
| title: Audits | ||
| description: The OmniBridge and xDai Bridge have undergone multiple independent security audits and assessments. | ||
| description: The OmniBridge and xDai Bridge have undergone multiple independent security audits and assessments. | ||
| keywords: [omnibridge audit, xdai bridge audit, security audit] | ||
| --- | ||
|
|
||
| The OmniBridge and xDai Bridge have undergone multiple independent security audits and assessments. We have engaged in the auditing process after introducing major functionality, and have acknowledged and/or fixed all issues found during these audits. Audit results are presented starting with the most recent. | ||
|
|
||
| ## xDAI bridge upgrade Audit by Omega | ||
|
|
||
| **Completed**: August 31, 2023 | ||
| **Conclusion**: 0 high severity issue, 2 medium issues, 5 low risk issues, 3 info issues. All issues has been resolved. | ||
| **Contracts**: https://github.com/Luigy-Lemon/tokenbridge-contracts/tree/DSR | ||
| **Audit Report**: [Omega Gnosis Bridge Final Audit Report](../../static/files/Omega%20-%20Gnosis%20Bridge%20-%20final%20report.pdf) | ||
| **Reference**: [Savings xDAI](../bridges/tokenbridge/xdai-bridge.md#savings-xdai) | ||
|
|
||
| ## OmniBridge v6.0 Smart Contracts Audit by ChainSecurity | ||
| __Completed__: September 7, 2021 | ||
| __Conclusion__: 0 Critical Risk Issues, 1 High Risk Issue Mitigated, 1 Medium Issue Mitigated, 2 Corrected, 13 Low Risk Issues all Acknowledged and/or Corrected. | ||
| __Contracts__: https://github.com/poanetwork/omnibridge | ||
| __Audit Report__: [ChainSecurity v6.0 Audit](/files/ChainSecurity_POA_Network_Omnibridge_Version_6_0_audit.pdf) | ||
|
|
||
| **Completed**: September 7, 2021 | ||
| **Conclusion**: 0 Critical Risk Issues, 1 High Risk Issue Mitigated, 1 Medium Issue Mitigated, 2 Corrected, 13 Low Risk Issues all Acknowledged and/or Corrected. | ||
| **Contracts**: https://github.com/poanetwork/omnibridge | ||
| **Audit Report**: [ChainSecurity v6.0 Audit](/files/ChainSecurity_POA_Network_Omnibridge_Version_6_0_audit.pdf) | ||
|
|
||
| ## OmniBridge Audit by ChainSecurity | ||
| __Completed__: April 27, 2021 | ||
| __Conclusion__: 0 Critical or High Risk Issues, 2 Medium Issues Accepted, 3 Low Risk Issues Accepted/Acknowledged | ||
| __Contracts__: https://github.com/poanetwork/omnibridge | ||
| __Audit Report__: [Chainsecurity OmniBridge Audit](https://chainsecurity.com/security-audit/poa-network-omnibridge/) | ||
|
|
||
| **Completed**: April 27, 2021 | ||
| **Conclusion**: 0 Critical or High Risk Issues, 2 Medium Issues Accepted, 3 Low Risk Issues Accepted/Acknowledged | ||
| **Contracts**: https://github.com/poanetwork/omnibridge | ||
| **Audit Report**: [Chainsecurity OmniBridge Audit](https://chainsecurity.com/security-audit/poa-network-omnibridge/) | ||
|
|
||
| ## TokenBridge Audit by Quantstamp (covers OmniBridge) | ||
| __Completed__: November 6, 2020 | ||
| __Conclusion__: No high and medium risk issues found, all low risk issues addressed. | ||
| __Contracts__: Revised in version 5.5.0-rc0 to address audit. https://github.com/poanetwork/tokenbridge-contracts/releases/tag/5.5.0-rc0 | ||
| __Audit Report__: [TokenBridge Audit by Quantstamp - OmniBridge](https://github.com/omni/tokenbridge/blob/master/audit/quantstamp/POA-Network-TokenBridge-contracts-5.4.1-security-assessment-report.pdf) | ||
|
|
||
| **Completed**: November 6, 2020 | ||
| **Conclusion**: No high and medium risk issues found, all low risk issues addressed. | ||
| **Contracts**: Revised in version 5.5.0-rc0 to address audit. https://github.com/poanetwork/tokenbridge-contracts/releases/tag/5.5.0-rc0 | ||
| **Audit Report**: [TokenBridge Audit by Quantstamp - OmniBridge](https://github.com/omni/tokenbridge/blob/master/audit/quantstamp/POA-Network-TokenBridge-contracts-5.4.1-security-assessment-report.pdf) | ||
|
|
||
| ## TokenBridge Audit by Quantstamp (covers AMB bridge) | ||
| __Completed__: January 8, 2020 | ||
| __Conclusion__: : All high risk issues resolved and low risk issues addressed. [More information available in this post](https://forum.poa.network/t/quantstamp-security-audit-for-tokenbridge-contracts-completed/3233). | ||
| __Contracts__: Revised in version 3.3.0 to address audit. https://github.com/poanetwork/tokenbridge-contracts/releases/tag/3.3.0 | ||
| __Audit Report__: [TokenBridge Audit by Quantstamp - AMB Bridge](https://github.com/omni/tokenbridge/blob/73d500210546e2959536dc569f1aec5752077225/audit/quantstamp/POA-Network-Token-bridge-security-assessment-report.pdf) | ||
|
|
||
| **Completed**: January 8, 2020 | ||
| **Conclusion**: : All high risk issues resolved and low risk issues addressed. [More information available in this post](https://forum.poa.network/t/quantstamp-security-audit-for-tokenbridge-contracts-completed/3233). | ||
| **Contracts**: Revised in version 3.3.0 to address audit. https://github.com/poanetwork/tokenbridge-contracts/releases/tag/3.3.0 | ||
| **Audit Report**: [TokenBridge Audit by Quantstamp - AMB Bridge](https://github.com/omni/tokenbridge/blob/73d500210546e2959536dc569f1aec5752077225/audit/quantstamp/POA-Network-Token-bridge-security-assessment-report.pdf) | ||
|
|
||
| ## Smart Contracts Security Analysis by SmartDec | ||
| __Completed__: July 2019 | ||
| __Conclusion__: All of the issues were addressed, some of them fixed in the latest version of the code. | ||
| __Contracts__: Revised in version 2.3.3 to address audit. https://github.com/poanetwork/tokenbridge-contracts/releases/tag/2.3.3 | ||
| __Audit Report__: [SmartDec Security Audit](https://github.com/omni/tokenbridge/blob/73d500210546e2959536dc569f1aec5752077225/audit/smartdec/POA-Network-TokenBridge-Contracts-v2-3-2-Security-Assessment.pdf) | ||
|
|
||
| **Completed**: July 2019 | ||
| **Conclusion**: All of the issues were addressed, some of them fixed in the latest version of the code. | ||
| **Contracts**: Revised in version 2.3.3 to address audit. https://github.com/poanetwork/tokenbridge-contracts/releases/tag/2.3.3 | ||
| **Audit Report**: [SmartDec Security Audit](https://github.com/omni/tokenbridge/blob/73d500210546e2959536dc569f1aec5752077225/audit/smartdec/POA-Network-TokenBridge-Contracts-v2-3-2-Security-Assessment.pdf) | ||
|
|
||
| ## Initial TokenBridge Audit by [Peppersec](https://peppersec.com/): | ||
| __Completed__: October 2018 | ||
| __Conclusion__: Rated the overall security level of the system as “High”. | ||
| __Contracts__: Updated to version 2.0.0 to address audit. https://github.com/poanetwork/tokenbridge-contracts/releases/tag/2.0.0 | ||
| __Audit Report__: [Peppersec Initial TokenBridge Audit](https://github.com/omni/tokenbridge/blob/73d500210546e2959536dc569f1aec5752077225/audit/peppersec/POA-Network-Token-bridge-security-assessment-report.pdf) | ||
|
|
||
| **Completed**: October 2018 | ||
| **Conclusion**: Rated the overall security level of the system as “High”. | ||
| **Contracts**: Updated to version 2.0.0 to address audit. https://github.com/poanetwork/tokenbridge-contracts/releases/tag/2.0.0 | ||
| **Audit Report**: [Peppersec Initial TokenBridge Audit](https://github.com/omni/tokenbridge/blob/73d500210546e2959536dc569f1aec5752077225/audit/peppersec/POA-Network-Token-bridge-security-assessment-report.pdf) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Binary file not shown.