Security Testing Report for Radiant V2

Radiant V2 is a cross-chain DeFi lending protocol developed by Radiant Capital. Radiant Capital has engaged us to perform security testing (as the red team) on the smart contracts of Radiant V2 to identify potential risks. Demonstrating their commitment to security, Radiant Capital has invested additional effort into safeguarding these smart contracts, which have already undergone audits by several security firms.

We adopted a multifaceted approach that included static analysis, dynamic analysis, semi-automatic, and manual verification to detect potential security issues. It is important to note that security testing differs from a security audit in terms of objectives and scope. Security testing specifically seeks to uncover vulnerabilities by simulating attacker behavior to breach the system, whereas a security audit provides a more comprehensive assessment of security by systematically identifying possible attack vectors. Consequently, security testing may not reveal some complex logical bugs that a security audit could identify due to time and resource constraints.

In conclusion, our findings reveal several high-risk issues within the codebase that demand immediate resolution. We have also pinpointed other less critical concerns and provided security enhancement recommendations. The Radiant team has swiftly addressed the issues we discovered. It is crucial to recognize that our evaluation pertains solely to the final reported versions of the codebase. Any changes made after our review would necessitate a new assessment.