diff --git a/audits/README.md b/audits/README.md index bf499f86b..4effb6868 100644 --- a/audits/README.md +++ b/audits/README.md @@ -11,8 +11,13 @@ The audits have been conducted before the [Cantina contest](https://cantina.xyz/ | Scope | Firm | Report | | --------------------------------- | ------------- | ---------------------------------------------------- | | Vault, Weighted Pool, Stable Pool | Certora | [`2024-09-04`](./certora/2024-09-04.pdf) | -| Vault, Weighted Pool, Stable Pool | Trail Of Bits | [`2024-12-11`](./trail-of-bits/2024-12-11.pdf) | -| Vault, Weighted Pool, Stable Pool | Spearbit* | [`2024-10-04`](./spearbit/2024-10-04.pdf) | - +| Vault, Weighted Pool, Stable Pool | Trail Of Bits | [`2024-10-08`](./trail-of-bits/2024-10-08.pdf) | +| Vault, Weighted Pool, Stable Pool | Spearbit1 | [`2024-10-04`](./spearbit/2024-10-04.pdf) | +| Pre-competition v3 codebase | Cantina2 | [`2024-12-17`](./cantina/2024-12-17.pdf) | +| Post-competition v3 codebase | Cantina2 | [`2024-12-31`](./cantina/2024-12-31.pdf) | + ## Addenda -* Note that 5.2.6 in the Spearbit audit of 2024-10-04 was resolved after the date of the audit. [PR #1113](https://github.com/balancer/balancer-v3-monorepo/pull/1113) replaces the event with explicit add/remove liquidity events, and accounts for swap fees in a separate field. + +1 Note that 5.2.6 in the Spearbit audit of 2024-10-04 was resolved after the date of the audit. [PR #1113](https://github.com/balancer/balancer-v3-monorepo/pull/1113) replaces the event with explicit add/remove liquidity events, and accounts for swap fees in a separate field. + +2 See [this page](https://cantina.xyz/competitions/949ad7c5-ea14-427d-b10a-54e33cef921b) for the description of the competition. The target was a pre-launch version of the codebase at [this commit](https://github.com/balancer/balancer-v3-monorepo/commit/147823666ff6556de2a01c6762ed688ab81a6a33). The follow-up post-competition review was performed on a [fork](https://github.com/cantina-forks/balancer-v3-monorepo/tree/73708b75898a62dac0535f38d1bf471ac0e538c6/) of the code after fixes (from 11/24/24, still pre-launch code). The final deployed v3 codebase contained fixes for all known issues. \ No newline at end of file diff --git a/audits/cantina/2024-12-17.pdf b/audits/cantina/2024-12-17.pdf new file mode 100644 index 000000000..0e98ffd71 Binary files /dev/null and b/audits/cantina/2024-12-17.pdf differ diff --git a/audits/cantina/2024-12-31.pdf b/audits/cantina/2024-12-31.pdf new file mode 100644 index 000000000..3a23e0b84 Binary files /dev/null and b/audits/cantina/2024-12-31.pdf differ