Tweag by Modus Create has been auditing Cardano smart contracts since late 2021. Mathieu Montin has written a retrospective on what more than 20 audits and 276 findings taught us: the patterns we keep seeing, what’s getting safer, and what still needs work.
A few highlights:
- Whole classes of Cardano/EUTXO-specific vulnerabilities, such as double satisfaction attacks, are fading as the platform and its developers mature
- Design issues remain common and are arguably the hardest and most costly to fix
- Unclear specification was the second-largest category, accounting for 70 findings, including one critical.
Full blog post here: Five years of Cardano smart-contract audits: a retrospective
2 contributors
- Olga Hryniukcontributed
- Tweag by Modus Create contributed
Would you like to suggest changes to this article?
We encourage you to actively participate in the creation and moderation of our content—your contributions are invaluable. All content is reviewed by another community member.
Suggest edit