Smart Contract Shadow Audit with Code4rena's Report | KUMA

This is part of a series where I am studying Audit Reports from Code4rena by shadow auditing the protocol's smart contracts written in Solidity. What you will find in these videos is: - An overview of the DeFi Protocol documentation. - A Code Analysis, which is important to get familiar with the protocol's Smart Contracts. - The review of the vulnerabilities from the official Code4rena's report and their mitigation in the code. ___________________________________________ Do you like my content? Now you can buy me beer/coffee for 1 euro to say thanks https://www.buymeacoffee.com/Bloqarl ___________________________________________ - Visit The Blockchainer Hub where you'll find all types of resources on your path in Web3 Security. Roadmaps, Articles, CTFs, Audit tools, and more... https://www.theblockchainerhub.xyz/ - Follow me on Twitter: https://twitter.com/TheBlockChainer - Check out my articles on Medium: https://medium.com/@bloqarl - Do you want to go all in on Web3 Security and start earning $$$ as I did? Enroll in the Smart Contract Hacking course For me, it was extremely useful to boost my knowledge and got me started auditing. Here is $50 discount to the Smart Contract Hacking course. https://smartcontractshacking.com/?referral=bloqarl ___________________________________________ Chapters: 0:00 Introduction 4:55 Audit Contest Overview 7:30 KUMA Protocol documentation Overview 13:50 KUMA's Exchange website 14:45 Getting the repository ready 17:00 kuma-protocol smart contracts 25:55 Openzeppelin Upgradable contracts 27:25 kuma-protocol smart contracts 30:55 UUPSUpgradable contracts 32:30 kuma-protocol smart contracts 46:50 PausableUpgradable contract 47:35 kuma-protocol smart contracts 58:40 mcag-contracts folder 1:05:05 Code4rena's report review ___________________________________________ More on Shadow Auditing The ultimate way to boost your Smart Contract Audit skills https://medium.com/@bloqarl/the-ultimate-way-to-boost-your-smart-contract-audit-skills-i-am-shadow-auditing-3d35fc2495a1?sk=90233fbddca6cc709bd4c7654c84f885 ___________________________________________ Helpful resources to improve on auditing: - My contest Audit results are 4 Highs, 7 Mediums… do you see this a lot? https://medium.com/@bloqarl/my-contest-audit-results-are-4-highs-7-mediums-do-you-see-this-a-lot-6eeb40016cab?sk=f1cc80129c14b7e91592d60efcf8fbde - Do you want to get rich with Solo Auditing SC in public contests? Let me tell you a secret! https://medium.com/@bloqarl/do-you-want-to-get-rich-with-solo-auditing-sc-in-public-contests-let-me-tell-you-a-secret-bcade368bf2d?sk=f51f0d86f46526f21773ed390ae81df7 - Struggling to prepare for a Smart Contract audit? Check how I prepared for the audit of Gravita protocol https://coinsbench.com/struggling-to-prepare-for-a-smart-contract-audit-b7bd77237ec2?sk=bb2a0ab966d6276bddfd6732f31cf2f0 For more resources visit https://www.theblockchainerhub.xyz/web3security/Web3SecurityPage ___________________________________________ Crypto tools I use Exchange Crypto for Gift cards with Bitrefill and get Bitcoin as cashback https://www.bitrefill.com/signup?code=3ddlz8mr