Skip to content

Instantly share code, notes, and snippets.

@protinam
Created December 12, 2017 00:15
Show Gist options
  • Save protinam/65c6408dc58940c70a096f5bcb4a9081 to your computer and use it in GitHub Desktop.
Save protinam/65c6408dc58940c70a096f5bcb4a9081 to your computer and use it in GitHub Desktop.
audit-requirements.md

The Wyvern Exchange, currently under development, is an upcoming decentralized digital item exchange running on the Ethereum blockchain. We're looking for a few experienced Solidity developers / smart contract auditors to audit the first set of smart contracts we intend to deploy.

Job requirements are as follows:

  1. Analyze the Wyvern Ethereum smart contracts found at https://github.com/ProjectWyvern/wyvern-ethereum/tree/master/contracts (an exact Git commit hash will be provided upon job acceptance).
  2. Generate a report highlighting all potential issues with the smart contract code and providing suggestions to fix any bugs or enhance general security.
  3. Share your findings with the Project Wyvern developers privately so that any issues can be addressed.
  4. Write an analysis to be shared publicly. Discuss the issues you found (if any), steps that were taken to reoslve them, and your overall thoughts on the state of the code.

Please note:

  • There is a token, for spam prevention and governance (https://token.projectwyvern.com), but this is not an ICO - instead, we are porting a former Bitcoin-style altcoin (which we took over as we thought the concept had promise as a DApp) to an ERC20 token.
  • A basic familiarity with Bitcoin concepts - UTXOs, Bitcoin address encoding, ECDSA signatures - will be required.
  • The smart contracts are well documented and covered by a relatively comprehensive testsuite - https://coveralls.io/github/ProjectWyvern/wyvern-ethereum - which you may find relevant.
  • The scope of this audit does not include the Exchange smart contract itself - that will come later, after more UX testing and concept validation. This audit is just for the Wyvern Token and the Wyvern DAO.

Set of smart contracts in the audit scope, relative to repository root:

  • contracts/WyvernToken.sol
  • contracts/WyvernDAO.sol
  • contracts/token/DelayedReleaseToken.sol
  • contracts/token/UTXORedeemableToken.sol
  • contracts/dao/DelegatedShareholderAssociation.sol
  • contracts/common/TokenRecipient.sol
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment