Omniscia Moby Audit

Static Analysis

Static Analysis

The execution of our static analysis toolkit identified 833 potential issues within the codebase of which 635 were ruled out to be false positives or negligible findings.

The remaining 198 issues were validated and grouped and formalized into the 57 exhibits that follow:

IDSeverityAddressedTitle
AUL-01SInexistent Sanitization of Input Addresses
BPM-01SIllegible Numeric Value Representation
BPM-02SSuboptimal Event Declaration
BPM-03SInexistent Sanitization of Input Addresses
BTN-01SInexistent Event Emissions
CRE-01SInexistent Event Emissions
CRE-02SInexistent Sanitization of Input Addresses
ERC-01SInexistent Visibility Specifier
FPE-01SInexistent Event Emission
FPE-02SInexistent Initialization Protection of Base Implementation
FPE-03SSuboptimal Event Declarations
FPF-01SInexistent Event Emissions
FDR-01SInexistent Event Emissions
FDR-02SSuboptimal Event Declaration
FDR-03SInexistent Sanitization of Input Addresses
MBT-01SInexistent Event Emission
OMR-01SIllegible Numeric Value Representation
OMR-02SInexistent Event Emissions
OMR-03SSuboptimal Event Declarations
OMR-04SInexistent Sanitization of Input Addresses
OMT-01SInexistent Initialization Protection of Base Implementation
OTN-01SInexistent Sanitization of Input Addresses
PMR-01SSuboptimal Event Declarations
PVF-01SInexistent Initialization Protection of Base Implementation
PVF-02SSuboptimal Event Declarations
PVF-03SVariable Mutability Specifier (Constant)
RDR-01SSuboptimal Event Declarations
RDR-02SInexistent Sanitization of Input Addresses
RRV-01SSuboptimal Event Declarations
RRV-02SInexistent Sanitization of Input Addresses
RTR-01SInexistent Event Emissions
RTR-02SSuboptimal Event Declaration
RTR-03SInexistent Sanitization of Input Address
SPD-01SInexistent Initialization Protection of Base Implementation
SPD-02SVariable Mutability Specifier (Constant)
SPF-01SIllegible Numeric Value Representation
SPF-02SInexistent Initialization Protection of Base Implementation
SPF-03SRedundant Variable Assignments
SPF-04SVariable Mutability Specifiers (Constant)
TUP-01SMultiple Top-Level Declarations
USD-01SInexistent Event Emissions
USD-02SInexistent Initialization Protection of Base Implementation
USL-01SIllegible Numeric Value Representation
VTL-01SIllegible Numeric Value Representations
VTL-02SInexistent Event Emission
VTL-03SSuboptimal Event Declarations
VTL-04SDeprecated Native Asset Transfer
VTL-05SInexistent Sanitization of Input Addresses
VPF-01SIllegible Numeric Value Representation
VPF-02SInexistent Event Emissions
VPF-03SInexistent Sanitization of Input Addresses
VUS-01SIllegible Numeric Value Representations
VUS-02SInexistent Event Emissions
VUS-03SLiteral Equality of bool Variables
VUS-04SInexistent Sanitization of Input Address
VAR-01SInexistent Sanitization of Input Addresses
YTN-01SInexistent Event Emissions