Crypto Flexs
  • DIRECTORY
  • CRYPTO
    • ETHEREUM
    • BITCOIN
    • ALTCOIN
  • BLOCKCHAIN
  • EXCHANGE
  • ADOPTION
  • TRADING
  • HACKING
  • SLOT
  • TRADE
Crypto Flexs
  • DIRECTORY
  • CRYPTO
    • ETHEREUM
    • BITCOIN
    • ALTCOIN
  • BLOCKCHAIN
  • EXCHANGE
  • ADOPTION
  • TRADING
  • HACKING
  • SLOT
  • TRADE
Crypto Flexs
Home»HACKING NEWS»Brahma: Console v2 Audit Summary
HACKING NEWS

Brahma: Console v2 Audit Summary

By Crypto FlexsNovember 24, 20232 Mins Read
Facebook Twitter Pinterest LinkedIn Tumblr Email
Brahma: Console v2 Audit Summary
Share
Facebook Twitter LinkedIn Pinterest Email

brahma console It is a storage and DeFi execution environment built as follows: safe Used as a custody rail, it enables granular access control through transaction policies and roles, as well as automated execution.

Brahma leveraged the Ackee Blockchain to perform a security review of commit 3578883 of the Brahma protocol with total time donations. 8 engineering days in the period between September 25th and October 5, 2023.

methodology

We began our review using a static analysis tool called Woke. We then took a closer look at the logic of the contract. Used Woke testing framework for testing and fuzzing.

We prepared a fuzz test covering the entire project, which yielded H1 and M1 problems.

During the review process, we paid special attention to the following:

  • All kinds of signature validation and testing
  • Check for possible registry manipulation
  • Check for possible replay attacks
  • Ensures that guards are not bypassed or lead to DoS
  • Ensure access controls are neither too relaxed nor too strict
  • Detect possible reentrancy in your code
  • I’m looking for common problems like data validation.

range

The audit was performed on commit 3578883 and scoped:

  • AddressProvider.sol
  • AddressProviderService.sol
  • constant.sol
  • ExecutorPlugin.sol
  • PolicyValidator.sol
  • SafeDeployer.sol
  • SafeEnabler.sol
  • SafeModerator.sol
  • SafeModeratorOverridable.sol
  • TransactionValidator.sol
  • ExecutorRegistry.sol
  • PolicyRegistry.sol
  • WalletRegistry.sol
  • SafeHelper.sol
  • TypeHashHelper.sol

For revision 1.1, a review was performed on the specified commit (4589ec4) and the scope was only results.

result

Here we have our result.

critical severity

No critical severity issues were found.

Severity High

H1: Console Permanent Denial of Service

medium severity

M1: _isGuardBeingRemoved check malfunction

low severity

L1: You can enable Console Guard with zero policy.

warning severity

W1: Approved addresses cannot be revoked.

W2: CallType in different order than safety task

W3: The registry address cannot be changed.

Information Severity

I1: old document

conclusion

Here are the results of our review: 7 findingsup to information to High Seriousness. The most serious thing discovered through fuzz testing was the possibility of denial of service (H1). Otherwise, the codebase is good quality and well designed.

Currently, H1 and M1 issues have been resolved by the Brahma team.

We recommended to Brahma:

  • Update documentation according to the new codebase.
  • Addresses all other reported issues.

Ackee blockchain is full steer You can find the audit report with a more detailed description of all findings and recommendations. here.

We were happy to give our thanks. steer We look forward to working with them again.

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email

Related Posts

The mindset of Retail Investors

July 3, 2025

$ 90m NOBITEX HACK: Fault by layer

July 1, 2025

Safe smart account audit summary

June 27, 2025
Add A Comment

Comments are closed.

Recent Posts

What Every Investor Should Know

July 6, 2025

Protecting Your Portfolio In A Volatile Market

July 6, 2025

A Trader’s Guide To Smarter Moves

July 6, 2025

Crypto Price Prediction Strategies – How Traders Forecast The Market

July 6, 2025

Causes, History, And How To Survive

July 6, 2025

A Guide To High-Risk, High-Reward Strategies

July 6, 2025

Ethereum MVRV has 1.20–1.25 and suggests that Market Peak is not visible.

July 6, 2025

Bitcoin holders reach $ 1 trillion in paper gains.

July 6, 2025

It flashes again in July

July 6, 2025

AAS MINER Rolls Out 2025 AI Cloud Mining Plan — Fully SEC-Compliant, Risk-Controlled, And Tailored For Crypto Enthusiasts

July 6, 2025

As Nano Labs begins to accumulate $ 1 billion, BNB gets a big supporter.

July 5, 2025

Crypto Flexs is a Professional Cryptocurrency News Platform. Here we will provide you only interesting content, which you will like very much. We’re dedicated to providing you the best of Cryptocurrency. We hope you enjoy our Cryptocurrency News as much as we enjoy offering them to you.

Contact Us : Partner(@)Cryptoflexs.com

Top Insights

What Every Investor Should Know

July 6, 2025

Protecting Your Portfolio In A Volatile Market

July 6, 2025

A Trader’s Guide To Smarter Moves

July 6, 2025
Most Popular

Altseason is approaching, and 40%of the profits become ‘new normal’ every day -analyst

May 11, 2025

Matrixport: Bitcoin reaches $50,000 with spot ETF approval imminent

January 2, 2024

Conflux (CFX) Invites Community Participation in New Bug Bounty Program

January 15, 2025
  • Home
  • About Us
  • Contact Us
  • Disclaimer
  • Privacy Policy
  • Terms and Conditions
© 2025 Crypto Flexs

Type above and press Enter to search. Press Esc to cancel.