Security and Agility of Aave Smart Contracts via Continuous Formal Verification

Certora Continuous Formal Verification Report February 2023

Hi, Aave Friends!

We’re posting a little later than usual following a very active month. a very active month. The team has been working hard behind the scenes to secure the protocol, and our findings will be published in the upcoming weeks. Take a look at what we’ve done in the past month.

Summary

  • safety module - we performed another review iteration following the modification of the code to address issues that were reported in January. In this iteration, we found and reported three additional issues, bringing the count to six - 1 high, 2 medium and 3 low severity. BGD promptly addressed the issues. The fixed version of the code passed all of the tests constructed for the Certora Prover, verifying that the reported issues were resolved.

The report will be released in March.

  • GHO - after a long review, with nearly 70 verified properties, we’re almost done with the GHO token review. A few issues were detected and reported to Aave developers.

The report will be published next month (this time for real :slightly_smiling_face:).

  • staticAToken - the lions-share of the verification was done this month. We reported three issues which were addressed promptly by the developers. We are continuing the verification effort and expect to complete it in March.

The report and results of this verification effort will be released along with the deployment of the token.

If you are interested in our work and would like to know more, feel free to reach out to us in the forum :)

General Note

Do you want to write some rules and help secure contracts for Aave? We are open to licensing applications. If you’re interested, fill out this form to apply for a key.

We encourage every community member to join us on our mission to formally verify Aave contracts. Who knows? You could even earn some money along the way. :upside_down_face:.

Follow us on Twitter to hear about our latest grant announcements: Twitter

Join our Aave dedicated discord channel: Discord

Talk to us LIVE every Wednesday at 14:30 GMT: Zoom

3 Likes