Verulink: Coinbase Quest audit report
Project Information
CATEGORY
Coinbase Quest protocol
NETWORK
Aleo
WEBSITE
https://venture23.xyz/
DESCRIPTION
From Aug. 26, 2024 to Sept. 2, 2024, Venture23 Inc. engaged Veridise to review the security of their Verulink – Coinbase Quest protocol. The review covered an Aleo program that allows Coinbase authenticated users to claim rewards and a backend to facilitate interaction with the Coinbase APIs. Veridise conducted the assessment over 12 person-days, with 2 engineers reviewing code over 6 days. The auditing strategy involved a tool-assisted analysis of the source code performed by Veridise engineers as well as extensive manual code review.
Audit Report
SCOPE
The scope of this audit is limited to the aleo/programs, and the backend/src folders of the source code provided by the Verulink – Coinbase Quest developers, which contains the Aleo program and Typescript backend implementations of the Verulink – Coinbase Quest.