Vacuumlabs Completes Audit of Agora Contracts

December 7th, 2022

Liqwid Labs LLC is delighted to share Vacuumlabs has concluded its security audit of the Agora on-chain governance modules and the Agora Pro premium extensions. Our core dev team resolved all of the issues that were detected by the audit to the satisfaction of the auditor’s code review process, except one which was acknowledged. Vacuumlabs has published the final report describing all of the findings, including a confirmation of the software updates pushed to fix issues and fulfill the auditor’s code review phase. Link to the final audit report: https://github.com/Liqwid-Labs/agora/blob/staging/Agora%20audit%20report-v1.0.pdf

Following the initial technical design review Vacuumlabs auditors completed a deeper manual audit of the code and reported findings along with recommendations to the team. The Vacuumlabs auditors manual-based code review process focused on several types of attacks, including but not limited to:

1. Double satisfaction

2. Stealing of funds

3. Violating business requirements

4. Token uniqueness attacks 5. Faking timestamps

6. Locking funds forever

7. Denial of service

8. Unauthorized minting

9. Loss of staking rewards

The audit lasted from 7 September 2022 to 1 December 2022. Findings identified by the auditors varied from minor to critical. Our core developers were able to quickly fix and push updates for all of the issues identified during the audit less one, which the Vacuumlabs auditors have acknowledged. The meticulous code inspection phase and rigorous validation process implemented by the Vacuumlabs auditors helped us quickly locate and diagnose outstanding issues.

Liqwid Lab’s collaboration with Vacuumlabs extends beyond the conclusion of the Agora audit; Vacuumlabs has been engaged to complete the Liqwid v1 lending and borrowing markets contracts built by our Liqwid Labs core dev team.

As a modular-built Cardano native protocol, Agora provides the necessary building blocks for any on-chain decentralized application to adopt and extend itself into a DAO-governed application. It consists of an open-source module (Agora) and a proprietary extension (Agora-Pro). Agora is one of the most complex Plutarch protocols to launch on Cardano to date. One of the first Agora instances to deploy on Cardano mainnet will be Liqwid DAO.

Stay tuned for more Agora development updates and if you are a Cardano builder dive into the documentation and codebase:
https://liqwid.notion.site/e85c09d2c9a542b19aac8dd3d6caa98b?v=d863219cd6a14082a661c4959cabd6e7
https://github.com/Liqwid-Labs/agora