BlockSquare

We express our gratitude to the BlockSquare team for the collaborative engagement that enabled the execution of this Smart Contract Security Assessment.

The Blocksquare Revenue Distribution System is an innovative smart contract ecosystem, specifically designed for managing and distributing revenue in a property management or real estate investment context.

The system users should acknowledge all the risks summed up in the risks section of the report

The Blocksquare Revenue Distribution System is an innovative smart contract ecosystem built on Ethereum, specifically designed for managing and distributing revenue in a property management or real estate investment context. It centralizes the revenue management process for property-related investments, offering a transparent and efficient way to handle revenue distributions and claims.

The files in the scope:

• RevenueDistribution.sol - this contract is central to the system, facilitating various functionalities:

• • Revenue Tracking and Distribution:

  • • Manages revenue associated with different properties (PropTokens).

    • Tracks individual and total revenue amounts for properties and users.

    • Enables the addition of revenue for properties and its distribution among multiple users.

  • Revenue Claiming:

  • • Provides functions for users to claim revenue for specific properties or multiple properties.

    • Supports claiming for individual and multiple wallets.

  • Data and Token Integration:

  • • Interacts with external contracts/interfaces indicated by data (for permissions) and tokenAddress (for token transfers).

• RevenueDistributionProxy.sol - a Transparent Upgradeable Proxy that serves as a flexible and upgradable front for the RevenueDistribution contract

Privileged roles

• RevenueDistribution:

• • Contract Owner:

  • • Has the authority to transfer ownership and renounce ownership.

    • Can update the data proxy (_data) address, affecting the system's core functionalities.

  • Authorized Users:

  • • Users with special permissions (verified through the _data contract) can add revenue to the system.

    • This role is restricted to system administrators or trusted community partners.

• RevenueDistributionProxy:

• • Proxy Admin:

  • • Responsible for managing and executing upgrades to the RevenueDistribution contract.

    • Holds significant power over the proxy contract, with the ability to change the business logic address (logic) and initialize new logic contracts.

The total Documentation Quality score is 10 out of 10.

• Functional requirements have some gaps:

• • Project overview is detailed

  • The roles within the system are described.

  • Use cases are described and detailed.

  • For each contract all futures are described

  • All interactions are described.

• Technical description is robust:

• • Run instructions are provided.

  • Technical specification is provided.

  • NatSpec is sufficient.

The total Code Quality score is 10 out of 10.

• The development environment is configured.

Code coverage of the project is 96.15% (branch coverage).

• Deployment and basic user interactions are covered with tests.

• Negative cases coverage is present.

• Interactions by several users are tested.

Upon auditing, the code was found to contain 0 critical, 0 high, 2 medium, and 2 low severity issues. All issues were fixed in the remediation part of this audit, leading to a security score of 10 out of 10.

All identified issues are detailed in the “Findings” section of this report.

The comprehensive audit of the customer's smart contract yields an overall score of 9.9. This score reflects the combined evaluation of documentation, code quality, test coverage, and security aspects of the project.

The scope of the project includes the following smart contracts from the provided repository:

Contracts in Scope