WOOFi is a cross-chain DEX where anyone can swap, stake, and earn crypto and trade perpetual futures across every major blockchain.
Scope
Contest Results
On what chains are the smart contracts going to be deployed?
Mainnet (router, and crossswaprouter only)
All four contracts - Arbitrum, Optimism, Base, Avalanche, BSC, Polygon PoS, Mantle, Fantom, Polygon zkEVM, zkSync, Linea
Which ERC20 tokens do you expect will interact with the smart contracts?
any
Which ERC721 tokens do you expect will interact with the smart contracts?
none
Do you plan to support ERC1155?
none
Which ERC777 tokens do you expect will interact with the smart contracts?
none
Are there any FEE-ON-TRANSFER tokens interacting with the smart contracts?
no
Are there any REBASING tokens interacting with the smart contracts?
no
Are the admins of the protocols your contracts integrate with (if any) TRUSTED or RESTRICTED?
Trusted
Is the admin/owner of the protocol/contracts TRUSTED or RESTRICTED?
Trusted
Are there any additional protocol roles? If yes, please explain in detail:
== WooPPV2.sol ==
== WooracleV2_2.sol ==
== WooRouterV2.sol ==
== WooCrossChainRouterV4.sol ==
Is the code/contract expected to comply with any EIPs? Are there specific assumptions around adhering to those EIPs that Watsons should be aware of?
NO explicit EIP needed to comply.
Please list any known issues/acceptable risks that should not result in a valid finding.
n/a
Please provide links to previous audits (if any).
Are there any off-chain mechanisms or off-chain procedures for the protocol (keeper bots, input validation expectations, etc)?
WOOFi's market maker uses offchain logic to update "Wooracle" contract's info (Threeparams: p - price, k - coefficient, s - spread). These Wooracle parameters are utilized by SPMM formula to simulate the liquidity of CEX orderbook
In case of external protocol integrations, are the risks of external contracts pausing or executing an emergency withdrawal acceptable? If not, Watsons will submit issues related to these situations that can harm your protocol's functionality.
NO, we don't allow any external smart contracts to execute pause or emergency withdrawal, or other risky/abnormal actions.
Do you expect to use any of the following tokens with non-standard behaviour with the smart contracts?
NO.
Add links to relevant protocol resources
The contract Woopp was exploited last week, where the exploiter took advantage of the sPMM formula and pushed WOO token price to almost zero. pls see details below
https://twitter.com/_WOOFi/status/1765150687166415129
Total Rewards
Contest Pool
Lead Senior Watson
Judging Pool
Lead Judge
31,000 USDC
8,500 USDC
1,100 USDC
1,400 USDC
Status
Scope
Start Time
End Time
Finished
1,354 nSLOC
Mar 12, 2024, 3:00 PM
Mar 20, 2024, 3:00 PM