UMA DVM 2.0 Incremental Audit
The primary focus of these modifications is on the UMA Data Verification Mechanism (DVM) 2.0 system. PR #4135 is notable because it reverts some suggested changes from the prior UMA DVM 2.0 audit in order to reduce the VotingV2 contract size.
UMA DVM 2.0 Audit
The UMA Data Verification Mechanism (DVM) is the ultimate source of truth in the oracle and governance system of the UMA Protocol. UMA's purpose is to serve as a trustworthy oracle for price requests of arbitrary assets. While the majority of price requests are handled by the Optimistic Oracle component of the UMA ecosystem, any dispute regarding the suggested price leads to the price request being escalated to the DVM.
UMA Optimistic Governor Audit
The UMA team asked us to review and audit their Optimistic Governor contract. This aims to allow anyone to control DAO funds and activities as long as their proposed activities conform to a set of natural language rules that the DAO has made publicly available.
UMA Across V2 Audit
The UMA team asked us to review and audit their Accross V2 Protocol which provides a mechanism that, in effect, allows users to send funds between all supported chains without waiting for standard token bridge transfers to complete. We examined the code, and here we publish our findings.
Uma Audit – Phase 6
The @UMAprotocol team asked us to review and audit a new governance proposal contract, a cross-chain mechanism, a cross-chain mechanism to distribute rewards to ERC721 token holders, and an update to their Optimism bridge. We examined the code, and here we publish our findings.
UMA Audit – L2 Bridges
The UMA team asked us to review and audit their L2 bridge smart contracts for the protocol. We examined the code, and here we publish our findings.
UMA Continuous Audit
In this audit we are taking an iterative approach where we will review individual pull requests as they are developed by the UMA team. We will repeatedly update this report with any new findings for the duration of our engagement.
UMA Audit – Phase 4
In this audit we reviewed some upgrades to the system, including a new financial contract template and the optimistic oracle.
UMA Audit – Phase 3
In this third phase of our engagement, the UMA team asked us to audit seven pull requests that make changes to Solidity contracts that we have already audited in previous phases. Since the PRs make local, isolated, changes to contracts that were previously audited, this report describes each change along with any findings from our audit.
UMA Audit – Phase 2
In this audit we reviewed a particular financial contract template that can be used within the system.
UMA DVM 2.0 Incremental Audit
The primary focus of these modifications is on the UMA Data Verification Mechanism (DVM) 2.0 system. PR #4135 is notable because it reverts some suggested changes from the prior UMA DVM 2.0 audit in order to reduce the VotingV2 contract size.
UMA DVM 2.0 Audit
The UMA Data Verification Mechanism (DVM) is the ultimate source of truth in the oracle and governance system of the UMA Protocol. UMA's purpose is to serve as a trustworthy oracle for price requests of arbitrary assets. While the majority of price requests are handled by the Optimistic Oracle component of the UMA ecosystem, any dispute regarding the suggested price leads to the price request being escalated to the DVM.
UMA Optimistic Governor Audit
The UMA team asked us to review and audit their Optimistic Governor contract. This aims to allow anyone to control DAO funds and activities as long as their proposed activities conform to a set of natural language rules that the DAO has made publicly available.
UMA Across V2 Audit
The UMA team asked us to review and audit their Accross V2 Protocol which provides a mechanism that, in effect, allows users to send funds between all supported chains without waiting for standard token bridge transfers to complete. We examined the code, and here we publish our findings.
Uma Audit – Phase 6
The @UMAprotocol team asked us to review and audit a new governance proposal contract, a cross-chain mechanism, a cross-chain mechanism to distribute rewards to ERC721 token holders, and an update to their Optimism bridge. We examined the code, and here we publish our findings.
UMA Audit – L2 Bridges
The UMA team asked us to review and audit their L2 bridge smart contracts for the protocol. We examined the code, and here we publish our findings.
UMA Continuous Audit
In this audit we are taking an iterative approach where we will review individual pull requests as they are developed by the UMA team. We will repeatedly update this report with any new findings for the duration of our engagement.
UMA Audit – Phase 4
In this audit we reviewed some upgrades to the system, including a new financial contract template and the optimistic oracle.
UMA Audit – Phase 3
In this third phase of our engagement, the UMA team asked us to audit seven pull requests that make changes to Solidity contracts that we have already audited in previous phases. Since the PRs make local, isolated, changes to contracts that were previously audited, this report describes each change along with any findings from our audit.
UMA Audit – Phase 2
In this audit we reviewed a particular financial contract template that can be used within the system.