The scope for the audit in 2023/Q1 is the ibc-hooks module and two smart contracts: crosschainswaps and swaprouter.
MoMs of the sync meetings are found in the folder: SyncMoMs
Issues reported on Osmosis Lab github repositories:
- Validation of string length is not present #3664
Other findings are not requested by Osmosis team to be reported as issues.
- Missing authorization in smart contracts
- Loading from ROUTING_TABLE optimization
- Minor code changes recommendations
- RECOVERY_STATES contract state not cleared after loading
- Validation of string length validation is not present
- SWAP REPLY STATE optimization
- Usage of Rust's unwrap function is not recommended
Document describing ics-20 fungible token transfer properties and end-to-end test scenarios and their execution is located here.