{"id":901,"date":"2024-08-09T17:48:44","date_gmt":"2024-08-09T15:48:44","guid":{"rendered":"https:\/\/ackee.xyz\/blog\/?p=901"},"modified":"2024-08-09T18:11:43","modified_gmt":"2024-08-09T16:11:43","slug":"lido-simple-delegation-audit-summary","status":"publish","type":"post","link":"https:\/\/ackee.xyz\/blog\/lido-simple-delegation-audit-summary\/","title":{"rendered":"Lido Simple Delegation Audit Summary"},"content":{"rendered":"

Lido Finance<\/a> Simple Delegation allows LDO token holders to delegate their voting power to other addresses and delegates to participate in on-chain voting on behalf of their delegated voters.<\/span><\/p>\n

Lido Finance engaged Ackee Blockchain to perform a security review of the Lido Finance Simple Delegation for a total of 10 engineering days in a period between Mar 18 and Mar 28, 2024.<\/span><\/p>\n

Lido Finance also engaged Ackee Blockchain to perform a fix review of findings in Revision 1.0 on commit e3cef8c<\/code>. Three out of ten findings were fixed, the remaining seven findings were acknowledged by the team with explanations. Lido Finance added several new tests and improved the documentation of private functions.<\/span><\/p>\n

 <\/p>\n

Revision 2.0<\/b><\/p>\n

Lido Finance engaged Ackee Blockchain to perform an incremental review of the Simple Delegation project with a total time donation of 2 engineering days in a period between Jun 27 and Jul 1, 2024.<\/span><\/p>\n

Lido Finance engaged Ackee Blockchain to perform a fix review of the findings discovered in the previous revision on commit 50d9802<\/code>. Three out of four findings were fixed, and one informational finding was acknowledged. Except for the fixed findings, two minor changes were made to the codebase to improve readability and gas usage. The new changes were reviewed as well. See Revision 2.1 for the details of the updated codebase.<\/span><\/p>\n

METHODOLOGY<\/span><\/h2>\n

We began our review using static analysis tools, including Wake<\/a>. We then took a deep dive into the logic of the contracts. For testing and fuzzing, we have involved the Wake testing framework.<\/span><\/p>\n

A complex, fully differential fuzz test<\/a> was prepared to ensure the system’s correctness. The fuzzing was performed with the bytecode generated by the Solidity compiler in version 0.4.24 with the optimizer enabled.<\/span><\/p>\n

During the review, we paid special attention to:<\/span><\/p>\n