ChainSecurity delivered their final audit report on January 5, 2023 covering the zkBobPool, BOBToken, and BobVault contracts along with relevant dependencies. We worked closely with the Chain Security team to address potential issues and are happy to report we’ve corrected or accepted risks for all findings from the report.
| Issue Severity | Found | Corrected / Updated Spec | Risk Accepted |
|---|---|---|---|
| Critical | 0 | N/A | N/A |
| High | 1 | 1 | 0 |
| Medium | 2 | 1 | 1 |
| Low | 8 | 5 | 3 |
The full pdf report is available on the ChainSecurity site as well as the zkBob Github ⬇️
{% embed url="https://github.com/zkBob/zkbob-contracts/blob/master/audit/chainsecurity/BOB_Protocol-contracts-1.0.0-rc2-security-audit-report.pdf" %}
\