Summary
100% of all REPORTED Findings have been addressed
- 0Acknowledged
- 0Risk Accepted
- 2Solved
- 2All Findings
- Critical0
- High0
- Medium0
- Low0
- Informational2
- 2Solved
Introduction#
CoreDAO engaged Halborn to perform a security assessment of their BTC Stacking tools from Nov. 11, 2024, to Nov. 15, 2024. The assessment focused on the specific codebase listed in the provided GitHub repository and included relevant commit hashes. More details can be found in the Scope section of this report.
Assessment Summary#
The Halborn team was allocated one week for the engagement and assigned a full-time security engineer to assess the security of the crates and the overall codebase. The security engineer is an expert in blockchain and smart contract security, with advanced skills in penetration testing and smart contract auditing, as well as extensive knowledge of various blockchain protocols.
Scope#
Findings Overview#
# | Title | Severity | Score | Status |
|---|---|---|---|---|
HAL-01 | Insecure Handling of Private Key | Informational | — | Solved11/26/2024 |
HAL-02 | Inconsistent Network Validation Logic | Informational | — | Solved11/26/2024 |
Disclaimer#
Halborn strongly recommends conducting a follow-up assessment of the project either within six months or immediately following any material changes to the codebase, whichever comes first. This approach is crucial for maintaining the project’s integrity and addressing potential vulnerabilities introduced by code modifications.