Project Information
CATEGORY
MetaMask Snaps
NETWORK
Mina Network
WEBSITE
http://minaprotocol.com/
DESCRIPTION
From Jun. 20, 2023 to Jun. 22, 2023, Mina Foundation engaged Veridise to review the security of their Mina Snap. This project implements a wallet for the Mina protocol as a MetaMask snap, and it includes features such as managing private keys, managing known Mina networks, and submitting transactions. Interactions with a Mina network node take place via the node’s GraphQL API. The security review covered the TypeScript implementation of the snap component of the project. Veridise conducted the assessment over 6 person-days, with 2 engineers reviewing code over 3 days. The auditing strategy involved extensive manual auditing by the Veridise engineers.
Audit Report
SCOPE
The scope of this audit is limited to the packages/snap folder of the source code provided by the Mina Snap developers. Specifically, the audit only covers the implementation of the snap component of the Mina Snap. During the audit, the Veridise auditors referred to external packages and services used by the Mina Snap but assumed that they have been implemented correctly.