Omniscia Alliance Block Audit

ERC Bridge Security Audit

Audit Overview

We were tasked with performing an audit of the Alliance Block bridge and in particular their NFT transfer protocol implementation allowing users to transmit an NFT asset across multiple chains in a unilateral fashion.

Over the course of the audit, we identified solely minor vulnerabilities and misconformities indicative of a high quality codebase with a minimal attack surface.

We strongly advise the Alliance Block team to remediate all vulnerabilities identified within the report and additionally consider the gas optimizations we have outlined to ensure the codebase remains of a high standard.

Post-Audit Conclusion

The Alliance Block team applied all the best security practices we advised, provided sufficient justification for the elimination of some of the findings, and assimilated the gas optimizations we recommended to the codebase.

The codebase's quality is in line with the rest of the Alliance Block codebase and can be considered to satisfy a high security standard.

Contracts Assessed

Files in ScopeRepositoryCommit(s)
Diamond.sol (DIA)abridge-erc7213ebfc6da8b,
6c28856184,
81ea95a7a0
DiamondLoupeFacet.sol (DLF)abridge-erc7213ebfc6da8b,
6c28856184,
81ea95a7a0
DiamondCutSimpleFacet.sol (DCS)abridge-erc7213ebfc6da8b,
6c28856184,
81ea95a7a0
DiamondCutGovernableFacet.sol (DCG)abridge-erc7213ebfc6da8b,
6c28856184,
81ea95a7a0
Governable.sol (GOV)abridge-erc7213ebfc6da8b,
6c28856184,
81ea95a7a0
GovernanceFacet.sol (GFT)abridge-erc7213ebfc6da8b,
6c28856184,
81ea95a7a0
LibRouter.sol (LRR)abridge-erc7213ebfc6da8b,
6c28856184,
81ea95a7a0
LibDiamond.sol (LDD)abridge-erc7213ebfc6da8b,
6c28856184,
81ea95a7a0
LibGovernance.sol (LGE)abridge-erc7213ebfc6da8b,
6c28856184,
81ea95a7a0
RouterFacet.sol (RFT)abridge-erc7213ebfc6da8b,
6c28856184,
81ea95a7a0
UtilityFacet.sol (UFT)abridge-erc7213ebfc6da8b,
6c28856184,
81ea95a7a0
WrappedERC721.sol (WER)abridge-erc7213ebfc6da8b,
6c28856184,
81ea95a7a0

Audit Synopsis

SeverityIdentifiedAlleviatedPartially AlleviatedAcknowledged
0000
1001
6402
4400

During the audit, we filtered and validated a total of 3 findings utilizing static analysis tools as well as identified a total of 8 findings during the manual review of the codebase. We strongly recommend that any minor severity or higher findings are dealt with promptly prior to the project's launch as they introduce potential misbehaviours of the system as well as exploits.

pie title Total Issues "Major" : 0 "Medium" : 1 "Minor" : 6 "Informational" : 4

The list below covers each segment of the audit in depth and links to the respective chapter of the report: