DESCRIPTION
The target of this audit is the private code repository of axcoin-evm-contracts of AX Coin Bahrain B.S.C (C). S.C (C). The PoRGatedMinter is a permissioned mint gate for the existing Fireblocks ERC20 stablecoin, AXUSD, that routes issuance through the multisig Operations vault. Each mint must come from an approved mint requester and pass a fresh proof-of-reserve check, a request deduplication check, and an optional per-call mint limit before AXUSD can be issued.
Please refer to the report for the detailed audit scope.
Our audit methodology employs automated vulnerability scans, manual verification, and business logic analysis to uncover potential security issues coupled with gas and code quality optimization recommendations.
In summary, we did not identify any potential issues within the audited codebase. However, we have some recommendations and notes that should be considered to further enhance the protocol's quality, security, and reliability. With no potential issues identified, the project demonstrates a relatively high level of security. It should also be noted that the scope of our audit was strictly limited to the specific code versions detailed in the report. Any updates subsequent to our review would necessitate a re-evaluation.
KEY FINDINGS
In total, we find 0 potential issues in the smart contract. We also have 2 recommendations and 4 notes, as follows:
| ID | Severity | Description | Status |
|---|---|---|---|
| 1 | - | Add zero-address checks | Fixed |
| 2 | - | Add zero-amount validation | Fixed |
| 3 | - | Deprecated Chainlink round field | - |
| 4 | - | Assumptions on external contracts | - |
| 5 | - | Potential centralization risks | - |
| 6 | - | Future L2 deployments should account for sequencer availability | - |
More details are provided in the audit report.