Tiki Labs Inc.
October 11, 2022
Audius
Findings Impact LevelCount
Critical
0
High
1
Medium
3
Low
1
Informational
0
CriticalHighMediumLowInformational
Prepared by
Ayaz MammadovEngineer[email protected]
Vlad ToieEngineer[email protected]
About

Audius focuses on the sector of music streaming services and gives monetary power and ownership back to artists and creators. With the support of blockchain and decentralization, Audius represents a platform for streaming and sharing music that aims to change the way fans and music creators interact, making sure to protect music ownership and return it to creators.

Executive Summary

Zellic conducted an audit for Tiki Labs Inc. from September 19th to October 7th, 2022.

Our general overview of the code is that it was very well-organized and structured. The code coverage is high, and tests are included for the majority of the functions. The documentation was adequate, although it could be improved. The code was easy to comprehend, and in most cases, intuitive.

We applaud Tiki Labs Inc. for their attention to detail and diligence in maintaining incredibly high code quality standards in the development of Audius.

Zellic thoroughly reviewed the Audius codebase to find protocol-breaking bugs as defined by the documentation and to find any technical issues outlined in the Methodology section of this document.

Specifically, taking into account Audius's threat model, we focused heavily on issues that would break core invariants such as the Governance proposals, both in terms of user interaction with them and in the way they execute. Moreover, we paid special attention to the way the protocol staking happens, such that all the contracts that are supposed to be able to stake can do so in a seamless manner and that the stakeholders are always secured.

During our assessment on the scoped Audius contracts, we discovered six findings. Of the six findings, one was of high severity, three of medium severity, one of low severity, and the remaining findings were informational in nature.

Additionally, Zellic recorded its notes and observations from the audit for Tiki Labs Inc.'s benefit in the Discussion section at the end of the document.

Zellic © 2023Back to top ↑