Security Audit Report for PumpBTC Contracts

The audit focuses on PumpBTC Contracts, enabling users to stake Wrapped Bitcoin tokens into the PumpStaking contract and mint pumpBTC tokens at a 1:1 ratio. These assets are then unwrapped into BTC for staking and rewards on Babylon. The protocol offers standard and instant unstake options with fees.

The scope includes only the contracts in the contracts folder, excluding other files and assuming dependencies are reliable.

Our iterative audit process covers the initial version and subsequent versions addressing discovered issues. We utilize automated scans, manual verification, and business logic analysis to identify security issues and provide optimization recommendations.

We identified that the codebase contains a high-risk issue, promptly addressed by the PumpBTC team. Additionally, we have put forth recommendations to further strengthen the code logic, along with notes that should be taken into consideration. It is important to note that the scope of our audit was strictly limited to the specific code versions mentioned in the report. Any updates made subsequent to our review would require a re-evaluation.