- Hacken
- Audits
- sophiaverse
- [dApp] Sentience | dApp | Feb2024
Audit name:
[dApp] Sentience | dApp | Feb2024
Date:
Apr 2, 2024
Table of Content
Introduction
We express our gratitude to the SophiaVerse team for the collaborative engagement that enabled the execution of this Security Assessment.
| title | content |
|---|---|
| Platform | Mobile Application, Browser Extantion |
| Language | Javascript / Typescript |
| Timeline | 07/02/2024 - 11/03/2024 |
| Methodology | https://hackenio.cc/dApp_methodology→ |
Audit Summary
10/10
100%
10/10
10/10
The system users should acknowledge all the risks summed up in the risks section of the report
Document Information
This report may contain confidential information about IT systems and the intellectual property of the Customer, as well as information about potential vulnerabilities and methods of their exploitation.
The report can be disclosed publicly after prior consent by another Party. Any subsequent publication of this report shall be without mandatory consent.
Document | |
|---|---|
| Name | Decentralized Application (dApp) Code Review and Security Analysis Report for SophiaVerse |
| Audited By | Ece Orsel |
| Approved By | Stephen Ajayi |
| Website | https://hacken.io→ |
| Changelog | 30/01/2024 - Preliminary Report |
Document
- Name
- Decentralized Application (dApp) Code Review and Security Analysis Report for SophiaVerse
- Audited By
- Ece Orsel
- Approved By
- Stephen Ajayi
- Website
- https://hacken.io→
- Changelog
- 30/01/2024 - Preliminary Report
System Overview
The SENTIENT Metamask Snap Project is centered on creating a streamlined and effective add-on for the Metamask digital currency wallet. The goal of this initiative is to improve the user interface and offer extra features within the Metamask environment by utilizing an uncomplicated but potent snap
Executive Summary
Documentation quality
The total Documentation Quality score is 10 out of 10.
Code quality
The total Code Quality score is 10 out of 10.
Structured Layout: The code is organized logically and systematically.
Uniform Coding Practices: The code adheres to a consistent style, improving its legibility.
Security score
Upon auditing, the code was found to contain 0 critical, 0 high, 0 medium, and 2 low severity issues, leading to a security score of 10 out of 10.
All identified issues are detailed in the “Findings” section of this report.
Summary
The comprehensive audit of the customer's dapp yields an overall score of 9. This score reflects the combined evaluation of documentation, code quality, test coverage, and security aspects of the project.
Findings
Code ― | Title | Status | Severity | |
|---|---|---|---|---|
| F-2024-1366 | Insecure Handling of User Inputs in Token Swapping Functionality | fixed | Low | |
| F-2024-1359 | Lack of Range Control for Slippage Value | fixed | Low | |
| F-2024-1370 | Untrusted Token Information | fixed | Observation |
Appendix 1. Severity Definitions
Severity | Description |
|---|---|
Critical | These issues present a major security vulnerability that poses a severe risk to the system. They require immediate attention and must be resolved to prevent a potential security breach or other significant harm. |
High | These issues present a significant risk to the system, but may not require immediate attention. They should be addressed in a timely manner to reduce the risk of the potential security breach. |
Medium | These issues present a moderate risk to the system and cannot have a great impact on its function. They should be addressed in a reasonable time frame, but may not require immediate attention. |
Low | These issues present no risk to the system and typically relate to the code quality problems or general recommendations. They do not require immediate attention and should be viewed as a minor recommendation. |
Severity
- Critical
Description
- These issues present a major security vulnerability that poses a severe risk to the system. They require immediate attention and must be resolved to prevent a potential security breach or other significant harm.
Severity
- High
Description
- These issues present a significant risk to the system, but may not require immediate attention. They should be addressed in a timely manner to reduce the risk of the potential security breach.
Severity
- Medium
Description
- These issues present a moderate risk to the system and cannot have a great impact on its function. They should be addressed in a reasonable time frame, but may not require immediate attention.
Severity
- Low
Description
- These issues present no risk to the system and typically relate to the code quality problems or general recommendations. They do not require immediate attention and should be viewed as a minor recommendation.
Appendix 2. Scope
The scope of the project includes the following endpoints from the provided repository:
Scope Details | |
|---|---|
| Repository | https://bitbucket.org/soph-gpai/senience/src/→ |
| Commit | 3039066784a2de98b10225fd6475e4b7766228a1→ |
| Repository | https://bitbucket.org/soph-gpai/sentience-mobile/src/→ |
| Commit | 99fafa28a78453ac7c2e877ca5f56b5c2adeb0c0→ |
| Whitepaper | https://hackenio.cc/hacken-methodologies→ |
| Requirements | Not Required |
| Technical Requirements | Not Required |
Scope Details
- Requirements
- Not Required
- Technical Requirements
- Not Required