Project Information
CATEGORY
MetaMask Snap
NETWORK
Ethereum and Arbitrum
WEBSITE
https://www.onthis.xyz/
DESCRIPTION
From Feb. 8, 2024 to Feb. 9, 2024, Onthis engaged Veridise to review the security of their Onthis MetaMask Snap. The review covered the client’s Metamask snap implementation, which is used to notify users on transactions with verification that the transaction recipient is a valid Onthis Shortcut contract. The snap also provides an estimate on rewards points that will be earned by valid transactions. Veridise conducted the assessment over 4 person-days, with 2 engineers reviewing code over 2 days. The auditing strategy involved extensive manual auditing performed by Veridise engineers.
Audit Report
SCOPE
The scope of this audit is limited to the code in the /packages/snap folder of the source code provided by the Onthis MetaMask Snap developers, which contains the snap implementation.