{"id":896,"date":"2024-08-02T13:16:02","date_gmt":"2024-08-02T11:16:02","guid":{"rendered":"https:\/\/ackee.xyz\/blog\/?p=896"},"modified":"2024-08-07T15:20:15","modified_gmt":"2024-08-07T13:20:15","slug":"rhinestone-module-registry-audit-summary","status":"publish","type":"post","link":"https:\/\/ackee.xyz\/blog\/rhinestone-module-registry-audit-summary\/","title":{"rendered":"Rhinestone Module Registry Audit Summary"},"content":{"rendered":"

Rhinestone<\/a> is dedicated to transforming smart accounts into an open platform for innovation. They aim to create a secure and interoperable ecosystem of modules, fostering permissionless smart account innovation and enabling developers to build powerful onchain products with seamless UX.<\/span><\/p>\n

The Module Registry<\/a> is a foundational layer of Rhinestone\u2019s tech stack. Its primary function is to enforce standards and security guarantees for users and developers by storing onchain security assertions made by independent auditors. The registry provides a scalable and trustless system for solving smart account security and enabling an open module ecosystem that is account vendor-agnostic, thanks to ERC-7579<\/a>.<\/span><\/p>\n

Rhinestone engaged Ackee Blockchain to perform a security review of the Rhinestone Module Registry for a total of 7 engineering days in a period between April 10 and April 19, 2024.<\/span><\/p>\n

METHODOLOGY<\/span><\/h2>\n

We began our review by using static analysis tools, namely <\/span>Wake<\/span><\/a> in companion with Tools for Solidity<\/a> VS Code extension. We then took a deep dive into the logic of the contracts. For testing and fuzzing, we have involved Wake testing framework.<\/span><\/p>\n

During the review, we paid special attention to:<\/span><\/p>\n