Project Information
CATEGORY
Cross-Chain Protocols & Bridges
NETWORK
Ethereum
WEBSITE
https://www.primeprotocol.xyz/
DESCRIPTION
From Mar. 9, 2023 to Mar. 31, 2023, Prime engaged Veridise to review the security of their Prime Protocol. The review covered an extension to the Prime Protocol that implements a new money markets feature that allows users to borrow from collateral token deposits. Compared to the previous version, which Veridise has audited previously, the code has been significantly revised to accommodate the new feature. Veridise conducted the assessment over 6 person-weeks, with 2 engineers reviewing code over 3 weeks. The auditing strategy involved a tool-assisted analysis of the source code performed by Veridise engineers as well as extensive manual auditing
Audit Report
SCOPE
The scope of this audit is limited to the the following files:
- The files that both (1) were in scope in the previous audit; and (2) are contained in one of the following folders:
- ecc
- interfaces
- master
- middleLayer
- satellite
- util
- The following new source files written by the developers:
- satellite/pToken/extensions/*
- satellite/pToken/implementations/*
- satellite/requestController/*
- master/irm/implementations/doubleLinear/*
Several files/components were also explicitly excluded from the scope, including:
- ECC.sol
- Axelar.sol
- Wormhole.sol
- PrimeOracle.sol
- ChainlinkFeedGetter.sol
- Staking.sol
- MultiStaticCall.sol
- Treasury.sol
During the audit, the Veridise auditors referred to the excluded files but assumed that they have been implemented correctly.