Back to work
Finalized public report

Ojo Node

Oracle Services

May 1, 2023CosmosInfrastructure

Critical / High

2Highest severity

Medium

1Moderate risk

Low / Informative

5Lower severity

Report files

1Downloadable assets

Audit lifecycle

This engagement is complete with finalized deliverables.

Completed

Completed

Scheduled

Scope, timeline, and review plan were agreed.

Completed

In Progress

Manual review and verification work were carried out.

Completed

Completed

The engagement wrapped with a published final report.

Executive Summary

High-level assessment and conclusions

A concise overview of the audit scope, core findings, and the key outcomes from the engagement.

Ojo engaged Runtime Verification Inc. to conduct a security audit of their smart contracts. The objective was to review the platform’s business logic and implementations in Rust, as well as in Go, and identify any issues that could potentially cause the system to malfunction or to be exploited.

The audit was conducted over the course of 8 calendar weeks (February 28, 2023 through April 14, 2023) focused on analyzing the security of the code related to the contracts of the Ojo platform, which enables users to query information about asset exchange rates. The platform also provides the necessary mechanics to run nodes, validators and price providers for tokens supported on the platform.

Reports

Download the audit artifacts

Access the published PDF deliverables associated with this engagement.

1 file

PDF report 1

Ojo.pdf

Download the published report for this engagement.

Download PDF