Crypto Flexs
  • DIRECTORY
  • CRYPTO
    • ETHEREUM
    • BITCOIN
    • ALTCOIN
  • BLOCKCHAIN
  • EXCHANGE
  • ADOPTION
  • TRADING
  • HACKING
  • SLOT
Crypto Flexs
  • DIRECTORY
  • CRYPTO
    • ETHEREUM
    • BITCOIN
    • ALTCOIN
  • BLOCKCHAIN
  • EXCHANGE
  • ADOPTION
  • TRADING
  • HACKING
  • SLOT
Crypto Flexs
Home»HACKING NEWS»Brahma: Console v2 Audit Summary
HACKING NEWS

Brahma: Console v2 Audit Summary

By Crypto FlexsNovember 24, 20232 Mins Read
Facebook Twitter Pinterest LinkedIn Tumblr Email
Brahma: Console v2 Audit Summary
Share
Facebook Twitter LinkedIn Pinterest Email

brahma console It is a storage and DeFi execution environment built as follows: safe Used as a custody rail, it enables granular access control through transaction policies and roles, as well as automated execution.

Brahma leveraged the Ackee Blockchain to perform a security review of commit 3578883 of the Brahma protocol with total time donations. 8 engineering days in the period between September 25th and October 5, 2023.

methodology

We began our review using a static analysis tool called Woke. We then took a closer look at the logic of the contract. Used Woke testing framework for testing and fuzzing.

We prepared a fuzz test covering the entire project, which yielded H1 and M1 problems.

During the review process, we paid special attention to the following:

  • All kinds of signature validation and testing
  • Check for possible registry manipulation
  • Check for possible replay attacks
  • Ensures that guards are not bypassed or lead to DoS
  • Ensure access controls are neither too relaxed nor too strict
  • Detect possible reentrancy in your code
  • I’m looking for common problems like data validation.

range

The audit was performed on commit 3578883 and scoped:

  • AddressProvider.sol
  • AddressProviderService.sol
  • constant.sol
  • ExecutorPlugin.sol
  • PolicyValidator.sol
  • SafeDeployer.sol
  • SafeEnabler.sol
  • SafeModerator.sol
  • SafeModeratorOverridable.sol
  • TransactionValidator.sol
  • ExecutorRegistry.sol
  • PolicyRegistry.sol
  • WalletRegistry.sol
  • SafeHelper.sol
  • TypeHashHelper.sol

For revision 1.1, a review was performed on the specified commit (4589ec4) and the scope was only results.

result

Here we have our result.

critical severity

No critical severity issues were found.

Severity High

H1: Console Permanent Denial of Service

medium severity

M1: _isGuardBeingRemoved check malfunction

low severity

L1: You can enable Console Guard with zero policy.

warning severity

W1: Approved addresses cannot be revoked.

W2: CallType in different order than safety task

W3: The registry address cannot be changed.

Information Severity

I1: old document

conclusion

Here are the results of our review: 7 findingsup to information to High Seriousness. The most serious thing discovered through fuzz testing was the possibility of denial of service (H1). Otherwise, the codebase is good quality and well designed.

Currently, H1 and M1 issues have been resolved by the Brahma team.

We recommended to Brahma:

  • Update documentation according to the new codebase.
  • Addresses all other reported issues.

Ackee blockchain is full steer You can find the audit report with a more detailed description of all findings and recommendations. here.

We were happy to give our thanks. steer We look forward to working with them again.

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email

Related Posts

$ 7.5m kilo X hacking inside

June 15, 2025

How to claim vault12 promotional code for Android and iOS

June 13, 2025

The Russian encryption CEO has filed a $ 555 million laundry plan for US sanctions.

June 11, 2025
Add A Comment

Comments are closed.

Recent Posts

Why is Cryptogames the best encryption gambling site?

June 18, 2025

ECB Chairman Lagarde aims to seize the global order to strengthen the Euro’s global position.

June 17, 2025

Bitcoin is ahead of the FOMC meeting. What is the following?

June 17, 2025

R0AR Introduces Unified DeFi Platform For Token, Liquidity, And NFT Staking

June 17, 2025

Avail Goes Full Stack To Capture $300bn Global Blockchain Infra Market

June 17, 2025

Polyhedra connects 83% ZKJ token collisions to liquidity attacks, CEX activities and market liquidation.

June 17, 2025

ZKJ Crypto Price Pumps 20%: Dead Cat Bounces?

June 17, 2025

Trading The World On Bybit

June 16, 2025

Universal Digital Inc. Announces Bitcoin Treasury Strategy Across North America And Asia

June 16, 2025

FansHash Launches Zero-Barrier Cloud Mining With Daily Payouts And Global Pool Access

June 16, 2025

The Number One Way For Ordinary People To Become Rich In 2025

June 16, 2025

Crypto Flexs is a Professional Cryptocurrency News Platform. Here we will provide you only interesting content, which you will like very much. We’re dedicated to providing you the best of Cryptocurrency. We hope you enjoy our Cryptocurrency News as much as we enjoy offering them to you.

Contact Us : Partner(@)Cryptoflexs.com

Top Insights

Why is Cryptogames the best encryption gambling site?

June 18, 2025

ECB Chairman Lagarde aims to seize the global order to strengthen the Euro’s global position.

June 17, 2025

Bitcoin is ahead of the FOMC meeting. What is the following?

June 17, 2025
Most Popular

From social experiments to retail ‘value extraction’ tool

March 2, 2025

Lightning Network – KeyError: What does ‘zmq-pub-channel-opened’ mean?

June 9, 2024

European residents express strong confidence in the future of cryptocurrencies

January 24, 2024
  • Home
  • About Us
  • Contact Us
  • Disclaimer
  • Privacy Policy
  • Terms and Conditions
© 2025 Crypto Flexs

Type above and press Enter to search. Press Esc to cancel.