Tortuga is a liquid staking protocol built on top of the Aptos blockchain. It allows Aptos users to stake APT coins to help secure the Aptos chain while earning rewards and maintaining liquidity.

Zellic conducted an audit for Move Labs from September 7th to September 20th, 2022.

Our general overview of the code is that clarity was only slightly impacted because of the organization; the relationships between the modules were complicated. The code coverage is high, and tests are included for the majority of the functions. No prover specifications were written at the time of the audit. The documentation was acceptable but could be improved. The code was relatively easy to comprehend.

We applaud Move Labs for their attention to detail and diligence in maintaining high code quality standards in the development of Tortuga Liquid Staking.

Zellic thoroughly reviewed the Tortuga Liquid Staking codebase to find protocol-breaking bugs as defined by the whitepaper and to find any technical issues outlined in the Methodology section of this document.

Specifically, taking into account Tortuga Liquid Staking's threat model, we focused heavily on issues caused by rounding or precision errors preventing commissions or payouts from occurring, locking funds, or enabling griefing attacks.

During our assessment on the scoped Tortuga Liquid Staking contracts, we discovered five findings. Fortunately, no critical issues were found. Of the five findings, two were of medium severity, two were of low severity, and the remaining finding was informational in nature.

Additionally, Zellic recorded its notes and observations from the audit for L\CustomerName{}'s benefit in the Discussion section at the end of the document.