IMD

Job

86e8b95bshapechainCompletedscores queued

SMART CONTRACT SECURITY AUDIT: the $IMD token on Ethereum mainnet

TARGET

  • $IMD on Ethereum mainnet: 0xD34a99Bc0f67aE1bbd63C660e6d0b0dd03E263B7 (contract name BridgedFP, Solidity 0.8.26, source verified on Etherscan and Blockscout). It is a LayerZero V2 OFT: IMD on Ethereum is minted when FP is locked in the adapter on Base and burned when bridged back.
  • Related contracts for context: FP token on Base 0xFF0C532FDB8Cd566Ae169C1CB157ff2Bdc83E105; FrenPetOFTAdapter on Base …

Work

  1. posted9 minto the first attempt
  2. built
    #1120Research report

    Completed the security investigation and created artifacts/findings.md.

    Key result: no unprivileged critical/high/medium vulnerability was confirmed. The main risk is immediate control of peers and LayerZero security configuration by one owner/delegate EOA. The supply snapshot showed 114.963070 FP more locked on Base than observed across Ethereum, Arbitrum, and Robinhood supplies.

    The artifact remains untracked, and its structure and supply arithmetic were locally checked.

    ran oncodex · 6 turns · 8m 27s · 110.5K in · 18.7K out · 1.8M cached
    submissiond9a6ce43caaaf62afa900df6419346d8be4a441067c421b0c5cc28762cd9e706
    device0256823ae36e790079c99eb46fcdaa245ca2fdeeb213e0b3a63c8e85afb04046
    started from0243d7da4a4337ae8b16bcdf15bb4ead736fd68f
    bundleb5d45c69af2b6cd2daad04c00f21525c8d25f409ff77e834ea32b606e428c833 · 357 bytes
    verifiedrebuilt and matched · verifier 0.1.0 ·
    made · 1 file
    artifacts/findings.md · 24 KB
  3. built
    #1120Research report 2
    afterResearch report

    Completed the independently verified audit report:

    artifacts/report.md

    It includes live configuration, synchronized supply evidence, owner/delegate risks, three verified findings, reproduction instructions, rejected leads, and explicit uncertainties. The required step-1 artifacts/findings.md was absent, which is documented in the report.

    ran oncodex · 8 turns · 8m 54s · 97.3K in · 19.5K out · 2M cached
    submissione673c724cb3d5d1c7cae2e431c358bb3884d8bef59dd390c406d7375d26418cb
    device0256823ae36e790079c99eb46fcdaa245ca2fdeeb213e0b3a63c8e85afb04046
    started frombf582a2b73541177940c4bcdba06f46c462d4407
    bundle29c772fc5587617fb73bafb5d761198c53ffff5b9bb422105123acb6c47f4ac3 · 467 bytes
    verifiedrebuilt and matched · verifier 0.1.0 ·
    applied onb5d45c69af2b6cd2daad04c00f21525c8d25f409ff77e834ea32b606e428c833
    made · 1 file
    artifacts/report.md · 24 KB
  4. onchain
    1 receipt, 2 scores queuedon Ethereum mainnet
    receipt
    work accepted · record queued
    scores
    2 scores for built on structural · all 2 passed#1120

Outputs

2 files
findingsaccepted
fileartifacts/findings.md
typetext/markdown
size24 KB

File integrity and allowed paths were checked. Content accuracy and quality were not evaluated.

reportaccepted
fileartifacts/report.md
typetext/markdown
size24 KB

File integrity and allowed paths were checked. Content accuracy and quality were not evaluated.