Project Information
CATEGORY
Bridge
NETWORK
Ethereum
WEBSITE
https://venture23.xyz/
DESCRIPTION
From Feb. 19, 2024 to Mar. 19, 2024, Venture23 engaged Veridise to review the security of their Ethereum-Aleo Bridge. The review covered the implementation of a bridge between Ethereum and Aleo. Veridise conducted the assessment over 8 person-weeks, with 2 engineers reviewing code over 4 weeks. The auditing strategy involved a tool-assisted analysis of the source code performed by Veridise engineers as well as extensive manual auditing.
Audit Report
SCOPE
The scope of this audit is limited to the solidity, aleo, and attestor folders, as well as the full dbservice repository. The solidity and aleo folders contain smart contracts for their respective blockchains, while the attestor folder contains a Golang project that is run by each attestor for the bridge. The dbservice repository defines services for adding both signatures and unconfirmed packets to a database and is written in Typescript.