Code Audit with Quantstamp

More audits to follow

Robson Silva
Pods
Published in
3 min readMay 31, 2021

--

On February 24th, 2021 Pods has completed a security code audit with Quantstamp. The scope of the audit was the in-depth analysis of the two core components of the protocol: the Options Instrument and the Options AMM.

Disclosure

Since the end of this code audit, the audited contracts have been updated, introducing fixes and improvements in the architecture.

The code is open-source for you to inspect at any time. Find below the repo and the official documentation in the links below.

Contract’s high-level architecture.

Report and conclusions

We wanted to increase the security in our development process and finding a spot available in good audit companies can be hard during the bull cycle. Quanstamp had an available spot and we took the opportunity to increase the feedback loop as fast as possible. Consequently and as we expected, many issues were found and all of them have been fixed by now.

You can view the code audit here:

By the time we completed the audit we have:

  • increased our code coverage to over 99%.
  • started implementing fuzzy testing tools.
  • vastly added documentation about the system’s logic.
  • later — added architecture components for efficient configurations.
  • later — enforced the power and effect of admin keys over the protocol.

Next steps

We are aware that bugs can go unnoticed even with multiple audits. For this reason, we’re doing everything we can to increase security and minimize the consequences of a potential vulnerability. At this point, this translates into:

  • Admin keys (learn more about admin powers)
  • Conservative caps.
  • Publicly beta testing since March 2nd.
  • Scheduled to start another audit on June 21st with Solidified.
  • Bug Bounty Program with Immunefi since April 28th.

We’re looking forward to increasing the system’s security.

Learn more about the risks of using Pods here.

Meet Pods

Pods is a decentralized non-custodial options protocol. It allows users to create puts or calls and trade them through a new Options AMM. Running on smart contracts, powered by the Ethereum Blockchain, Pods is focused on creating the easiest way to hedge crypto in DeFi.

Meet Quantstamp

Quantstamp conducts smart contract, off-chain, networking, and front-end audits in order to enhance the security of your decentralized application. Its mission is to secure the decentralized internet and has protected over $45B in digital asset risk from hackers. More than 170 startups, foundations, and enterprises work with Quantstamp to keep their innovative products safe.

About Pods

Pods is a decentralized non-custodial options protocol. Users can create options and trade them through an Options AMM on the Ethereum Blockchain. Pods is the easiest way to hedge crypto in DeFi.

We invite you to take the first step in your new mission: start testing the app on app.pods.finance

Join the Pods community

app | website | documentation | blog | twitter | youtube | telegram | discord

--

--