Crypto Flexs
  • DIRECTORY
  • CRYPTO
    • ETHEREUM
    • BITCOIN
    • ALTCOIN
  • BLOCKCHAIN
  • EXCHANGE
  • ADOPTION
  • TRADING
  • HACKING
  • SLOT
Crypto Flexs
  • DIRECTORY
  • CRYPTO
    • ETHEREUM
    • BITCOIN
    • ALTCOIN
  • BLOCKCHAIN
  • EXCHANGE
  • ADOPTION
  • TRADING
  • HACKING
  • SLOT
Crypto Flexs
Home»HACKING NEWS»Lido Stonks Audit Summary – Ackee Blockchain
HACKING NEWS

Lido Stonks Audit Summary – Ackee Blockchain

By Crypto FlexsJune 25, 20244 Mins Read
Facebook Twitter Pinterest LinkedIn Tumblr Email
Lido Stonks Audit Summary – Ackee Blockchain
Share
Facebook Twitter LinkedIn Pinterest Email

Stonks is a sophisticated solution designed for token exchange utilizing an off-chain CoW swap platform. This system allows token swaps to be performed securely without the tokens in balance being managed by a professional token management committee within the DAO framework.

Revision 1.0

Lido Finance collaborated with Ackee Blockchain and donated a total of 7 days of engineering time from January 28 to February 5, 2024 to conduct a security review of the Lido Finance protocol.

Revision 1.1

A revision review was performed on that commit. 4c51f22. Issues M1, W1, W3, I1, I2, I3 and I4 were fixed as per recommendations. Warnings W2 and W4 were acknowledged as unlikely in relation to the client’s intent.

Revision 1.2

Lido Finance leveraged Ackee Blockchain to ensure that contracts deployed on the Ethereum mainnet matched the reviewed codebase. Verification was performed on commit. 40af0bb If there have been minor changes since the last review of the scoped contract:

methodology

The Lido Stonks contract was tested with a differential fuzz test written in the Wake testing framework.

We began our review using static analysis tools, including Wake. We then took a closer look at the logic of the contract. At the same time, we have included a wake test framework to implement differential fuzz testing along with fork testing, including Chainlink simulations.

During fuzz testing, I found issues with M1, W1, and W3.

During the review process, we paid special attention to the following:

  • Accuracy of Chainlink integration;
  • Compliant with EIP-1271 standard,
  • Verify that the system’s calculations are correct,
  • Detect possible reentrancy in your code,
  • Ensure access controls are neither too relaxed nor too strict
  • Look for common problems such as data validation,
  • Search for possible gas optimization.

Revision 1.1

A revision review was performed on that commit. 4c51f22. Issues M1, W1, W3, I1, I2, I3 and I4 were fixed as per recommendations. Warnings W2 and W4 were acknowledged as unlikely in relation to the client’s intent.

Revision 1.2

Lido Finance leveraged Ackee Blockchain to ensure that contracts deployed on the Ethereum mainnet matched the reviewed codebase. Verification was performed on commit. 40af0bb If there have been minor changes since the last review of the scoped contract:

  • stokes
  • Stokes Factory
  • money converter
  • Money converter factory
  • Bespeak

range

An audit has been performed on the commit. edf39c7 The exact scope was the following files:

Revision 1.0: An audit was initially performed on commits. edf39c7.

Revision 1.1: Review of the last delivered commit continued. 4c51f22.

Revision 1.2: A review of the commit has been performed. 40af0bb.

result

We present our findings here.

critical severity

No critical severity issues were found.

Severity High

No high severity issues were found.

medium severity

M1: SafeERC20 Not used for approval

low severity

No low-severity issues were found.

warning severity

W1: MIN_POSSIBLE_BALANCE inadequate logic

W2: Chainlink feed registry mainnet only

W3: InvalidExpectedOutAmount get back

W4: Assume stablecoins are stable

Information Severity

I1: Unused code

I2: Missing events

I3: Duplicate code

I4: Typos and documentation

conclusion

The review yielded nine findings ranging from informational to moderate severity.

The most serious problem is the violation of the protocol when using non-standard ERC-20 tokens such as USDT (see M1). The overall code quality is solid, follows best practices, and includes appropriate data validation. The code was fully covered with detailed NatSpec documentation, and developers provided comprehensive specifications for onboarding.

Ackee Blockchain recommends Lido Finance:

  • Instead, use ‘SafeERC20.forceApprove’ or ‘SafeERC20.safeIncreaseAllowance’.
  • ‘ERC20.Approved’,
  • Chainlink data feed limitations (deviation threshold, general
  • heartbeat) may be a factor limiting fairness evaluation,
  • Don’t assume that a stablecoin will always be worth $1.
  • Addresses all other reported issues.

Ackee Blockchain’s full Lido Finance audit report, which includes a detailed description of all findings and recommendations, can be found here.

We were delighted to thank Lido Finance and look forward to working with them again.

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email

Related Posts

Encryption Inheritance Update: April 2, 2025

June 6, 2025

Summary of Domain Audit that cannot be stopped -Ackee Blockchain

June 5, 2025

Director Trezor: What is the best hardware wallet in 2025?

June 4, 2025
Add A Comment

Comments are closed.

Recent Posts

NVIDIA’s GB200 NVL72 and Dynamo improve MoE model performance

June 7, 2025

Despite market volatility

June 7, 2025

TEZOS promotes scaling efforts by activating data soluble layers.

June 7, 2025

It shows a graphite network. Tesla is nothing without trust because Tesla’s Tesla spent $ 150 billion after Musk and Trump’s fallout.

June 7, 2025

The merchant warns that Bitcoin is in ‘cancer price behavior’.

June 7, 2025

Is Bitcoin Price Rally $ 150K by the end of the year?

June 7, 2025

How does it affect Bitcoin?

June 7, 2025

Gala Games introduces a step -by -step approach to founder node staking.

June 7, 2025

AB starts in binance

June 7, 2025

ETF publisher’s latest warning -SEC’s approval process ‘Innovation, AIDS GIANTS’

June 7, 2025

Solana (SOL) introduces Alpenglow for faster blockchain agreement.

June 7, 2025

Crypto Flexs is a Professional Cryptocurrency News Platform. Here we will provide you only interesting content, which you will like very much. We’re dedicated to providing you the best of Cryptocurrency. We hope you enjoy our Cryptocurrency News as much as we enjoy offering them to you.

Contact Us : Partner(@)Cryptoflexs.com

Top Insights

NVIDIA’s GB200 NVL72 and Dynamo improve MoE model performance

June 7, 2025

Despite market volatility

June 7, 2025

TEZOS promotes scaling efforts by activating data soluble layers.

June 7, 2025
Most Popular

IOTA Community Allocates Funds to Strengthen EVM Ecosystem

August 1, 2024

Top 10 Games of 2023

January 1, 2024

MEV bot jaredfromsubway.eth has become the #1 daily Ethereum gas consumer.

June 6, 2024
  • Home
  • About Us
  • Contact Us
  • Disclaimer
  • Privacy Policy
  • Terms and Conditions
© 2025 Crypto Flexs

Type above and press Enter to search. Press Esc to cancel.