NEW YORK, 31/03/2021— The codebase for CompliFi’s automated market maker (AMM) pool contract has undergone an audit by the CertiK Auditing Team. Through the utilization of this AMM, anyone is able to create a pool and finalize it, following that any user is able to join the pool and receive pool tokens. The summary of the audit and its findings follows up.

Use-Case Profile

CompliFi Protocol comprises a decentralized protocol for issuing a wide range of financial derivatives without the risk of default, liquidations, or collateral calls.

In early February, CompliFi expanded their product offering beyond the aforementioned derivatives issuance protocol to…

NEW YORK, 25/03/2021- The Zenfuse Team has successfully undergone an audit of their ‘Token Timelock’, an ERC-20 timebased lock mechanism most often utilized to release developer funds at a certain point in the future. A summary of the audit and its findings follows up.

Use-Case Profile

With a mission to make trading effortless and more profitable for both beginners and professionals, Zenfuse enables trading on multiple cryptocurrency exchanges from one secure account on both desktop and mobile.

ZEFU, the native token and the unit of exchange in the Zenfuse ecosystem, serves a number of use cases; including, but not limited to, staking…

On March 14th, the CertiK Security Team discovered a novel type of attack which was leveraged against the DeFi stablecoin project; True Seigniorage Dollar. The attack resulted in a total loss of approximated $16,600. In order to conduct this, the attacker took advantage of the principle of the Decentralized Autonomous Organization (DAO) mechanism in order to conduct an attack without manipulating conventional ‘vulnerabilities’.

Technical Analysis

The Attack Process:

1. The attacker (0x50f753c5932b18e9ca28362cf0df725142fa6376) acquired a large number of True Seigniorage Dollar tokens (TSD) at a low price. They then leveraged those tokens for voting power and forcibly passed proposal №

We’re happy to announce that the implementation of Ternoa blockchain’s native token CapsuleCoin, was successfully audited by CertiK Professional Services Division. In this spotlight, we elaborate on the scope of the audit, as well as present some of the issues found during the auditing process.

Use-Case Profile

Ternoa is a Polkadot ecosystem parachain, build to upscale the NFT sub-culture to its next level of existence offering time capsules, cross-chain, and cross-platform NFT interoperability, and highly secured and encrypted on-chain, in association with Sia, Storj, and Arweave to mention a few.

An array of protocols in the form of autonomous smart contracts empower…

NEW YORK, 08/03/2021 — We’re excited to announce that Aluna. Social’s codebase which contains the Aluna Token, the Aluna Rewards Pool, the Aluna Token Vesting, and the Aluna Boost Pools smart contracts were successfully audited by CertiK.

Use-Case Profile

Aluna is a gamified social trading ecosystem for the Web 3.0 world. ALN is the utility token at the heart of the Aluna ecosystem, and its core functions are to:

• Bootstrap the community, ecosystem, utility and liquidity.
• Fuel the incentive and gamification mechanisms on ALN-powered platforms.
• Coordinate decentralized governance and reward the community of governors.

Aluna’s flagship product, Aluna.Social, is a gamified social…

On March 5th, 2021, PAID Network suffered from a “mint” attack caused by private keys mismanagement. The proxy owner’s private keys were used (or compromised) to swap the deployed code audited by CertiK with the malicious one containing the burn and mint functions used during the attack. Such burn and mint functions were not present in the audited code. We are not able to confirm what transpired up to the point the contract ownership was transferred to the address that executed the burn and mint functions, but we can conclude these are the actions that occurred. View the full audit…

NEW YORK, 26/02/2021 — We’re happy to announce that the implementation of Unido’s native token UDO, was successfully audited by CertiK Professional Services Division. In this spotlight, we elaborate on the scope of the audit, as well as present some of the issues found during the auditing process.

Use-Case Profile

Unido is enabling enterprises to manage and invest their crypto assets in a seamless, secure, and intuitive way. It offers easy-to-navigate UI/UX both for related and academic investors to tap into cross-chain DeFi protocols all from one single entry point.

Code Review & Auditing Process

The initial review was conducted between February 20th, and February 24th, 2021…

NEW YORK, 26/02/2021 — We’re happy to announce that we’ve engaged in a strategic partnership with Deflect, an innovative white-label platform for tokenomics and smart-contracts. The scope of the audit for our initial clash includes a series of EVM-based smart contracts, more specifically: DeflectPoolDEFETH.sol, DeflectPoolDEFRFI.sol, DeflectPoolRFIETH.sol, Deflector.sol, and IDeflector.sol.

Use-Case Profile

Deflect Protocol is an industry-first solution that plans to bring multi-network scalability, funding potential, and gas-less redistribution of tokens, all under one platform via the PRISM of Integrations.

Deflect enables DeFi startups with white-label solutions and provides a multi-network launchpad service for any EVM compatible network to create custom…