Quantstamp conducted a security audit of Astar Network

Yakub Sheikh
Astar Network
Published in
2 min readDec 24, 2021

--

About Quantstamp

Quantstamp is the leader in blockchain security, having performed over 200 audits and secured more than $200 billion in value. Quantstamp’s mission is to facilitate the mainstream adoption of blockchain technology through our security and risk adjustment services. Quantstamp services include auditing Layer 1 blockchains such as Ethereum 2.0 and Solana, NFT ecosystems such as Illuvium and Flow, and smart contract powered applications such as Curve and Maker. Enterprise companies and NGOs such as Siemens, Toyota, and World Economic Forum trust Quantstamp to secure their blockchain ecosystems.

With over 1000 Google scholar citations and numerous published papers, Quantstamp’s team has decades of combined experience in formal verification, static analysis, and software verification. Quantstamp has also developed a protocol to help smart contract developers and projects worldwide to perform cost-effective smart contract security scans.

Quantstamp’s collaborations with leading academic institutions such as the National University of Singapore and MIT (Massachusetts Institute of Technology) reflect the commitment to research, development, and enabling world-class blockchain security.

Astar Security Audit

Quantstamp’s objective was to evaluate the repository for security-related issues, code quality, and adherence to specification and best practices. Possible issues looked for included (but are not limited to):

  • Transaction-ordering dependence
  • Timestamp dependence
  • Mishandled exceptions and call stack limits
  • Unsafe external calls
  • Integer overflow/underflow
  • Number rounding errors
  • Reentrancy and cross-function vulnerabilities
  • Denial of service / logical oversights
  • Access control
  • Centralization of power
  • Business logic contradicting the specification
  • Code clones, functionality duplication
  • Gas usage
  • Arbitrary token minting.

Quantstamp: “We have reviewed the code, documentation, and test suite and found several issues of various severities. Overall, we consider the code well-written and with sufficient documentation and a good test suite. We have outlined suggestions to follow best practices better, and recommend addressing all the findings to tighten the contracts for future deployments or contract updates.”

As a result, Four non-critical issues were identified, three of them fixed, and one acknowledged.

Read the full report -

https://certificate.quantstamp.com/view/a-star-network-staking

About Astar Network/Shiden Network

Astar Network (previously known as Plasm) is a dApp hub on Polkadot that supports Ethereum, WebAssembly, and layer 2 solutions like ZK Rollups. Astar aims to be a multi-chain smart contract platform that will support multiple blockchains and virtual machines. Shiden Network is a sister network of Astar Network and a dApp hub on Kusama.

Follow us

Website | Twitter | Discord | Telegram | Github

--

--