Omniscia WagmiDAO Audit

Manual Review

Manual Review

A thorough line-by-line review was conducted on the codebase to identify potential malfunctions and vulnerabilities in WagmiDAO's token ecosystem.

As the project at hand implements multi-featured tokens, intricate care was put into ensuring that the flow of funds within the system conforms to the specifications and restrictions laid forth within the protocol's specification.

We validated that all state transitions of the system occur within sane criteria and that all rudimentary formulas within the system execute as expected. We pinpointed multiple unaccounted fringe cases within the system as well as improper validation of configurational parameters which could have had minor to moderate ramifications to its overall operation, however, they were conveyed ahead of time to the WagmiDAO team to be promptly remediated.

Additionally, the system was investigated for any other commonly present attack vectors such as re-entrancy attacks, mathematical truncations, logical flaws and ERC / EIP standard inconsistencies. The documentation of the project was satisfactory to the extent it need be.

A total of 30 findings were identified over the course of the manual review of which 14 findings concerned the behaviour and security of the system. The non-security related findings, such as optimizations, are included in the separate Code Style chapter.

The finding table below enumerates all these security / behavioural findings:

IDSeverityAddressedTitle
FCT-01MMajorYesInexistent Enforcement of Accounting Accuracy
FCT-02MMediumYesImproper Sanitization of Wagmi Percentage
FCT-03MMediumYesInexistent Validation of I/O Amounts
FCT-04MMediumYesOverly Centralized Single Points of Failure
FCT-05MMediumYesPotential Arbitrage Opportunity
FCT-06MMinorYesInexistent Validation of Threshold
FTN-01MMediumYesOverly Centralized Single Point of Failure
FTN-02MMinorYesArbitrary Burn Mechanism
WAS-01MMinorYesInexistent Validation of Previous Status
WAS-02MMinorYesUsage of Deprecated Function
WBD-01MMinorYesImproper Ratio Precision Validation
WBD-02MMinorNoImproper Vesting Block Management
WBD-03MMinorYesUsage of Deprecated Function
WTN-01MMediumYesOverly Centralized Single Point of Failure