Skip to content

Latest commit

 

History

History
156 lines (123 loc) · 23.5 KB

README.md

File metadata and controls

156 lines (123 loc) · 23.5 KB

README

NEAR Audit Database

Audits

Public Audits in the NEAR Ecosystem. Make a PR to add additional ones, this is a work in progress, got lazy not even close to finishing.

To-do

  • Finish finding all audits
  • Backup all the audits on Arweave + IPFS and archive all instances of audit on wayback machine
  • Work with ecosystem aggregator like NEAR Horizon to reference audits
  • Compile all the exploits
  • Format all sexy
  • Let projects and NEAR Founders know to make a PR
  • Contact all projects without audits and let them know they can’t be lacking in these streets like that
  • Publish this on BOS
  • try to get funding for all these unaudited projects from NF or ……. lol

🔑 Key

  • ✅ audit public, doesn’t mean no vulnerabilities, and doesn't mean audit has been checked or its been by firm listed below, just that it exists. This also doesn’t mean that an audit was done for all smart contract and dApp functionality.
  • 📦 audit may exist somewhere but private. Or publicly mentioned an audit but the audit isnt public.
  • 👀 = looking for an audit make a PR
  • 🟡 = getting an audit
  • 😡 = as of last talking to team no audit

Infrastructure

Protocol Audit stage Audited By Date Report
Aurora Staking Farm
Octopus Network - App Chain Anchor ✅ Blocksec July 10, 2022 Click here
Rainbow Bridge Smart Contract ✅ Blaize Security October 5, 2022 Click here
Proximity Labs - NearETH - NETH ✅ OtterSec May 06, 2022 Click here
AstroDAO 👀
Keypom

DeFi

Protocol Audit stage Audited By Date Description Report
Tonic ✅ Veridise February 13 2023 Click Here

v2.ref-finance.near

v2.ref-farming.near (1)

 ✅ Jita March 2022 All ref audits here Click here

v2.ref-finance.near

v2.ref-farming.near (2)

 ✅ Jita May 2022 Click here
Ref DCL Contracts (1) ✅ Blocksec Dec 9, 2022 Click here
Ref DCL Contracts (2) ✅ Blocksec Feb 10, 2023 Click here
xRef Token Contract ✅ Blocksec October 12, 2022 Click here
Ref Exchange (1) ✅ Blocksec Nov 2, 2022 Click here
Ref Exchange (2) ✅ Blocksec Nov 20, 2022 Click here
Ref-ve ✅ Blocksec July 14, 202 Click here
Ref-Boost-Farm ✅ Blocksec July 26, 2022 Click here
Pembrock ✅ BlockSec June 27th, 2021 Click here
Stader ✅ OtterSec September 09, 2022 Click here
Metapool ✅ Blocksec March 1, 2022 Click here
Metapool - AuroraStNEAR ✅ BlockSec March 20th, 2022 Click here
Orderly 📦 Halborn 📦
Orderly ✅ Certik Sep 16th, 2022 Click here
Spin Finance ✅ BlockApex July 19, 2022 Click here
Burrow Finance ✅ BlockSec Click here
Burrow Finance ✅ BlockSec Click here
JumpDeFi 👀
Jumbo.Exchange 👀
HideYourCash 😡

Wallets

Protocol Audit stage Audited By Date Report
Sender Wallet - Android ✅ Slowmist July 15, 2022 Click here
Sender Wallet - iOS ✅ Slowmist July 15, 2022 Click here
Sender Wallet - Browser Extension ✅ Slowmist July 6, 2022 Click here
Meteor Wallet 👀
HERE Wallet Liquid Staking ✅ OtterSec January 6, 2023 Click here
MyNEARWallet 👀
Wallet.near.org
NEARFi Wallet 👀
Salmon Wallet 😡
Welldone Wallet 👀
Nightly Wallet - NEAR :eye
Opto Wallet - NEAR
Math Wallet - NEAR 👀
Narwallets 👀
Coin98 Wallet 👀
Metamask Snaps (NEAR Snap) 😡
Finer Wallet 👀
xDeFI Wallet 👀

NFT

Protocol Audit stage Audited By Date Report
FewNFar 👀
Mintbase 👀
Paras.id 👀
Tradeport.xyz 👀

Gaming

Protocol Audit stage Audited By Date Report
PlayEmber 👀

Bridges

Protocol Audit stage Audited By Date Report
Wormhole ✅ OtterSec August 26, 2022 Click here
Allbridge
XP.network

🪲 Bug Bounty Programs

Protocol Bug Bounty Page
NEAR General Bug Bounty Program For Near - HackenProof
Aurora Buy Bounty Program for Aurora - HackenProof
Ref finance Bug Bounty Ref Finance - ImmuneFi
SweatCoin Sweat Economy Bug Bounties - Immunefi
Stader on NEAR Stader for NEAR Bug Bounties - Immunefi

Known NEAR Auditing Firms

Firms that are known for auditing NEAR dApps & Contracts

Firm Public Audits
Veridise Click here
Ottersec Click here
FYEO
Kudelski
Sigma Prime Click here
Chain Security
Block Security
Halborn Click here

Firms That Audits Have Failed to Detect Critical Vulnerabilities

dont slip up and get added to this list

Exploits

Slip Ups

Description Link
Near Protocol Discloses Wallet Breach That May Have Exposed Private Keys Decrypt