DfynRFQ is a multichain AMM DEX that is built to be an interconnected AMM with nodes spread on different blockchains, and those AMMs will be able to share liquidity and enable cross-chain swaps. Currently, Dfyn is live on Polygon and Fantom.
Zellic conducted an audit for Router Protocol from July 18th to July 20th, 2022.
Our general overview of the code is that it was well-organized and structured. The code coverage is adequate, and tests are included for the majority of the functions; however, it can be further extended and improved on. The documentation was minimal, and it could be improved. The code was easy to comprehend, and in most cases, intuitive.
We applaud Router Protocol for their attention to detail and diligence in maintaining high code quality standards in the development of DfynRFQ.
Zellic thoroughly reviewed the DfynRFQ codebase to find protocol-breaking bugs as defined by the documentation and to find any technical issues outlined in the Methodology section of this document.
Specifically, taking into account DfynRFQ's threat model, we focused heavily on issues that would break core invariants such as the swaps signatures and their verification as well as how the fees are calculated and distributed. Moreover we thoroughly investigated the correctness of the swap functionality, such that it serves its intended purpose.
During our assessment on the scoped DfynRFQ contracts, we discovered 3 findings. Fortunately, no critical issues were found. Of the 3 findings, 1 was of low severity, and the remaining findings were informational in nature.
Additionally, Zellic recorded its notes and observations from the audit for Router Protocol's benefit in the Discussion section at the end of the document.