Crypto Flexs
  • DIRECTORY
  • CRYPTO
    • ETHEREUM
    • BITCOIN
    • ALTCOIN
  • BLOCKCHAIN
  • EXCHANGE
  • ADOPTION
  • TRADING
  • HACKING
  • SLOT
Crypto Flexs
  • DIRECTORY
  • CRYPTO
    • ETHEREUM
    • BITCOIN
    • ALTCOIN
  • BLOCKCHAIN
  • EXCHANGE
  • ADOPTION
  • TRADING
  • HACKING
  • SLOT
Crypto Flexs
Home»HACKING NEWS»Сow Protocol: ComposableCoW and ExtensibleFallbackHandler Audit Summary
HACKING NEWS

Сow Protocol: ComposableCoW and ExtensibleFallbackHandler Audit Summary

By Crypto FlexsDecember 15, 20233 Mins Read
Facebook Twitter Pinterest LinkedIn Tumblr Email
Сow Protocol: ComposableCoW and ExtensibleFallbackHandler Audit Summary
Share
Facebook Twitter LinkedIn Pinterest Email

CoW Swap is the first trading interface built on the CoW protocol. CoW Swap is a Meta DEX aggregator that allows you to buy and sell tokens using gasless orders, settled peer-to-peer between users or settled with on-chain liquidity sources, while protecting against MEV.

cow protocol We performed a security review of ComposableCoW and ExtensibleFallbackHandler leveraging Ackee Blockchain, with total time donations as follows: 8 engineering days in the period between July 18th and July 28, 2023.

methodology

We use static analysis tools, namely wake up. We then took a closer look at the logic of the contract. For testing we wake up Test framework. During the review process, we paid special attention to the following:

  • replay attack
  • Signature Verification
  • Payload manipulation
  • Possible re-entry detection
  • Verify that the system’s calculations are correct
  • Accuracy of data encoding/decoding
  • ERC-1271 compliance
  • I’m looking for common problems like data validation.

range

The audit was conducted in the following scope:

A review has been performed on the specified commit. Revision 1.0:

  • 27ec79b For ComposableCow
  • 11273c1 For ExtensibleFallbackHandler

Revision 1.2 was done in the ComposableCow commit. bd2634dThe ExtensibleFallbackHandler commit has not changed since Revision 1.1.

result

Here we have our result.

critical severity

C1: StopLoss arithmetic mismatch

Severity High

No high severity issues were found.

medium severity

M1: Oracle data validation

low severity

L1: Constructor data validation

warning severity

W1: GPv2Order data tampering

W2: Revert condition mismatch

W3: Vulnerable MerkleProof library

W4: GoodAfterTime order is missing recipient address.

Information Severity

I1: Unnecessary SafeMath

I2: Missing cabinet organization

I3: Error in documentation

I4: Specify TradeAboveThreshold order recipient name

I5: mismatch error

I6: Commented code

I7: Inconsistent naming

conclusion

The review resulted in 14 findings ranging in severity from informational to critical. important issue C1: StopLoss arithmetic mismatch Modified according to our recommendations and M1: Oracle data validation The issue has been implemented correctly (revision 1.2).

Other issues include low-severity data validation, warnings, and informational findings, which are recommendations rather than issues. The overall code quality and architecture are professional. The entire project is well documented, with in-code NatSpec documentation and detailed explanations.

Ackee Blockchain recommends the CoW protocol.

  • To add Oracle data validation
  • Know about zero address verification
  • To unify syntax and naming
  • We resolve all reported issues.

As of revision 1.2, the L1: constructor data validation issue has been acknowledged and all other issues have been fixed.

Ackee blockchain is full COW Protocol You can find the audit report with a more detailed description of all findings and recommendations. here.

We were happy to give our thanks. cow protocol And I’m looking forward to working with them again.

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email

Related Posts

Encryption Inheritance Update: April 2, 2025

June 6, 2025

Summary of Domain Audit that cannot be stopped -Ackee Blockchain

June 5, 2025

Director Trezor: What is the best hardware wallet in 2025?

June 4, 2025
Add A Comment

Comments are closed.

Recent Posts

Gala Games unveils a new byte pack in VEXI village.

June 7, 2025

XRP price prediction by reducing the volume of RLUSD (RIPPLE USD)

June 7, 2025

ARCA is disappointed with the IPO allocation and dumps the circle sharing.

June 7, 2025

Eigenlayer starts the redistribution function in testnets

June 6, 2025

Musk & Trump SPAT sends trenches from DOGE Price Crumbling, Tesla.

June 6, 2025

Musk & Trump SPAT sends trenches from DOGE Price Crumbling, Tesla.

June 6, 2025

Vortex uses NVIDIA Jetson to innovate medical imaging with CT-similar ultrasound.

June 6, 2025

2025 Best Free Cloud Mining

June 6, 2025

Sei Development Foundation: Use of US Innovation for Global Block Chain

June 6, 2025

Analyst Michaël Van de Poppe says Bitcoin is getting higher.

June 6, 2025

Does Ethereum start their business? MorningStar Candlestick Pattern tells the story

June 6, 2025

Crypto Flexs is a Professional Cryptocurrency News Platform. Here we will provide you only interesting content, which you will like very much. We’re dedicated to providing you the best of Cryptocurrency. We hope you enjoy our Cryptocurrency News as much as we enjoy offering them to you.

Contact Us : Partner(@)Cryptoflexs.com

Top Insights

Gala Games unveils a new byte pack in VEXI village.

June 7, 2025

XRP price prediction by reducing the volume of RLUSD (RIPPLE USD)

June 7, 2025

ARCA is disappointed with the IPO allocation and dumps the circle sharing.

June 7, 2025
Most Popular

Trader said Bitcoin said, ‘If it is maintained in a healthy state, the top 30 diversification altcoin can increase 150%.

May 2, 2025

bitcoinj – Creating a Bitcoin wallet using P2TR

May 27, 2024

Solana-based memecoin surges more than 40,000% since the beginning of the year

October 25, 2024
  • Home
  • About Us
  • Contact Us
  • Disclaimer
  • Privacy Policy
  • Terms and Conditions
© 2025 Crypto Flexs

Type above and press Enter to search. Press Esc to cancel.