4 ms·

Do you have some sources for this claim? Or just a belief?

by yunohn 5y ago

whitepaint 5y ago
High quality protocols like PoolTogether for example have this: https://docs.pooltogether.com/security/audits-and-testing https://docs.pooltogether.com/security/audits-and-testing
- yunohn 5y ago
  Most people have never heard of PoolTogether, so I’m not sure if your definition of “first tier” and “high quality” is objective. Regardless, this quote from your link stands out: “it should never be expected that 100% of the deployed code has been formally audited.”
  - whitepaint 5y ago
    It has $175 M locked in the protocol, it is also featured on https://ethereum.org/en/dapps/ https://ethereum.org/en/dapps/, and is one of the oldest DeFI projects. By my definition, it is both "first tier" and "high quality". We can of course have the philosophical debate of objectivity and if such thing even exists, not sure if it's needed here though. The audits of this protocol is also continuous.
    - yunohn 5y ago
      175M$ is like 1/4th of the hack that this thread is discussing. Also, they specifically state that not everything is audited? Nowhere do they mention continuous audits.
      - whitepaint 5y ago
        You are right, it's not mentioned, but they do in fact spend hundreds of thousands every few months for audits. You'll find more info here: https://gov.pooltogether.com/ https://gov.pooltogether.com/
1998v2 5y ago
Here are some examples I'm aware of, I haven't personally verified these. Uniswap: https://uniswap.org/audit.html https://uniswap.org/audit.html Sushi Swap: https://github.com/peckshield/publications/blob/master/audit_reports/PeckShield-Audit-Report-SushiSwap-v1.0.pdf https://github.com/peckshield/publications/blob/master/audit... Alpaca Finance (high complexity in my opinion): https://docs.alpacafinance.org/transparency https://docs.alpacafinance.org/transparency A lot of projects provide their source and you can verify that what you're interacting with matches the source.
crypt1d 5y ago
Not sure what you mean by source, but its fairly easy to find out if any official audits were done as this is always announced and documented by the involved parties (for example, I couldn't find any detailed audit info for Poly). It's not like the audit is mandated by law, its initiated by the SC owners to put the investors at ease. A lot of companies like Certik, Consensys, ZK Labs, etc. provide auditing services for this purpose explicitly.

Do you have some sources for this claim? Or just a belief?

by yunohn 5y ago

Do you have some sources for this claim? Or just a belief?

High quality protocols like PoolTogether for example have this: https://docs.pooltogether.com/security/audits-and-testing https://docs.pooltogether.com/security/audits-and-testing

yunohn 5y ago
Most people have never heard of PoolTogether, so I’m not sure if your definition of “first tier” and “high quality” is objective. Regardless, this quote from your link stands out: “it should never be expected that 100% of the deployed code has been formally audited.”
- whitepaint 5y ago
  It has $175 M locked in the protocol, it is also featured on https://ethereum.org/en/dapps/ https://ethereum.org/en/dapps/, and is one of the oldest DeFI projects. By my definition, it is both "first tier" and "high quality". We can of course have the philosophical debate of objectivity and if such thing even exists, not sure if it's needed here though. The audits of this protocol is also continuous.
  - yunohn 5y ago
    175M$ is like 1/4th of the hack that this thread is discussing. Also, they specifically state that not everything is audited? Nowhere do they mention continuous audits.
    - whitepaint 5y ago
      You are right, it's not mentioned, but they do in fact spend hundreds of thousands every few months for audits. You'll find more info here: https://gov.pooltogether.com/ https://gov.pooltogether.com/

1998v2 5y ago

Here are some examples I'm aware of, I haven't personally verified these. Uniswap: https://uniswap.org/audit.html https://uniswap.org/audit.html Sushi Swap: https://github.com/peckshield/publications/blob/master/audit_reports/PeckShield-Audit-Report-SushiSwap-v1.0.pdf https://github.com/peckshield/publications/blob/master/audit... Alpaca Finance (high complexity in my opinion): https://docs.alpacafinance.org/transparency https://docs.alpacafinance.org/transparency A lot of projects provide their source and you can verify that what you're interacting with matches the source.

crypt1d 5y ago

Not sure what you mean by source, but its fairly easy to find out if any official audits were done as this is always announced and documented by the involved parties (for example, I couldn't find any detailed audit info for Poly). It's not like the audit is mandated by law, its initiated by the SC owners to put the investors at ease. A lot of companies like Certik, Consensys, ZK Labs, etc. provide auditing services for this purpose explicitly.