Crypto Flexs
  • DIRECTORY
  • CRYPTO
    • ETHEREUM
    • BITCOIN
    • ALTCOIN
  • BLOCKCHAIN
  • EXCHANGE
  • ADOPTION
  • TRADING
  • HACKING
  • SLOT
  • TRADE
Crypto Flexs
  • DIRECTORY
  • CRYPTO
    • ETHEREUM
    • BITCOIN
    • ALTCOIN
  • BLOCKCHAIN
  • EXCHANGE
  • ADOPTION
  • TRADING
  • HACKING
  • SLOT
  • TRADE
Crypto Flexs
Home»HACKING NEWS»Brahma: Console v2 Audit Summary
HACKING NEWS

Brahma: Console v2 Audit Summary

By Crypto FlexsNovember 24, 20232 Mins Read
Facebook Twitter Pinterest LinkedIn Tumblr Email
Brahma: Console v2 Audit Summary
Share
Facebook Twitter LinkedIn Pinterest Email

brahma console It is a storage and DeFi execution environment built as follows: safe Used as a custody rail, it enables granular access control through transaction policies and roles, as well as automated execution.

Brahma leveraged the Ackee Blockchain to perform a security review of commit 3578883 of the Brahma protocol with total time donations. 8 engineering days in the period between September 25th and October 5, 2023.

methodology

We began our review using a static analysis tool called Woke. We then took a closer look at the logic of the contract. Used Woke testing framework for testing and fuzzing.

We prepared a fuzz test covering the entire project, which yielded H1 and M1 problems.

During the review process, we paid special attention to the following:

  • All kinds of signature validation and testing
  • Check for possible registry manipulation
  • Check for possible replay attacks
  • Ensures that guards are not bypassed or lead to DoS
  • Ensure access controls are neither too relaxed nor too strict
  • Detect possible reentrancy in your code
  • I’m looking for common problems like data validation.

range

The audit was performed on commit 3578883 and scoped:

  • AddressProvider.sol
  • AddressProviderService.sol
  • constant.sol
  • ExecutorPlugin.sol
  • PolicyValidator.sol
  • SafeDeployer.sol
  • SafeEnabler.sol
  • SafeModerator.sol
  • SafeModeratorOverridable.sol
  • TransactionValidator.sol
  • ExecutorRegistry.sol
  • PolicyRegistry.sol
  • WalletRegistry.sol
  • SafeHelper.sol
  • TypeHashHelper.sol

For revision 1.1, a review was performed on the specified commit (4589ec4) and the scope was only results.

result

Here we have our result.

critical severity

No critical severity issues were found.

Severity High

H1: Console Permanent Denial of Service

medium severity

M1: _isGuardBeingRemoved check malfunction

low severity

L1: You can enable Console Guard with zero policy.

warning severity

W1: Approved addresses cannot be revoked.

W2: CallType in different order than safety task

W3: The registry address cannot be changed.

Information Severity

I1: old document

conclusion

Here are the results of our review: 7 findingsup to information to High Seriousness. The most serious thing discovered through fuzz testing was the possibility of denial of service (H1). Otherwise, the codebase is good quality and well designed.

Currently, H1 and M1 issues have been resolved by the Brahma team.

We recommended to Brahma:

  • Update documentation according to the new codebase.
  • Addresses all other reported issues.

Ackee blockchain is full steer You can find the audit report with a more detailed description of all findings and recommendations. here.

We were happy to give our thanks. steer We look forward to working with them again.

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email

Related Posts

Summary of the Router Router

July 17, 2025

Encryption Inheritance: Industrial Round Up -January 20125

July 15, 2025

Floki Eyes 120% Rally Valhalla launches $ 10K prizes after explosive weekly growth

July 13, 2025
Add A Comment

Comments are closed.

Recent Posts

MultiBank Group To List $MBG Token On Gate.io And MEXC During Official Token Generation Event

July 18, 2025

Earn $4,777 Daily! PaxMining Leads 2025’s Record-Breaking Bitcoin Mining Boom

July 18, 2025

GSR Leads $100M Private Placement Into Nasdaq-listed MEI Pharma To Launch First Institutional Litecoin Treasury Strategy Alongside Charlie Lee

July 18, 2025

KuCoin Launches XStocks, Delivering A One-Stop Access Point To Top Global Tokenized Equities

July 18, 2025

💵 FREE $18 USDT – Just For Signing Up!

July 18, 2025

How Does AIXA Mining Break Traditional Barriers?

July 18, 2025

How Does AIXA Mining Break Traditional Barriers?

July 18, 2025

The future of EF ecosystem development

July 18, 2025

Satoshi-Aera Bitcoin Whale moves another 40K BTC to Galaxy Digital.

July 18, 2025

Behind The Surge In XRP, DLMining Brings New Opportunities To Mine BTC With Your XRP

July 18, 2025

The strategy has hit the highest market cap since the Rally Bitcoin rally.

July 17, 2025

Crypto Flexs is a Professional Cryptocurrency News Platform. Here we will provide you only interesting content, which you will like very much. We’re dedicated to providing you the best of Cryptocurrency. We hope you enjoy our Cryptocurrency News as much as we enjoy offering them to you.

Contact Us : Partner(@)Cryptoflexs.com

Top Insights

MultiBank Group To List $MBG Token On Gate.io And MEXC During Official Token Generation Event

July 18, 2025

Earn $4,777 Daily! PaxMining Leads 2025’s Record-Breaking Bitcoin Mining Boom

July 18, 2025

GSR Leads $100M Private Placement Into Nasdaq-listed MEI Pharma To Launch First Institutional Litecoin Treasury Strategy Alongside Charlie Lee

July 18, 2025
Most Popular

Clothing manufacturers, headquartered in China, say they are looking at $ 800 million BTC and Trump.

May 15, 2025

Golem (GLM) Project Advances in GPU Provider Beta Test Program

May 24, 2024

Dogecoin Whale Exit, Reduces Total Supply by 9%

June 20, 2024
  • Home
  • About Us
  • Contact Us
  • Disclaimer
  • Privacy Policy
  • Terms and Conditions
© 2025 Crypto Flexs

Type above and press Enter to search. Press Esc to cancel.