Skip to main content

The Polkadot Claims Audit

August 7, 2019 in Polkadot Audit, Security
Avatarby Polkadot

Web3 Foundation engaged Chain Security for an audit of the Polkadot Claims smart contract. The audit found 0 Critical, 0 High, 2 Medium and 9 Low level issues, all of which have been resolved in the latest commits to the code.

The Polkadot Claims contract is an Ethereum smart contract that allows holders of the DOT allocation indicator token to claim their balances of DOTs to a Polkadot public key ahead of Polkadot genesis.

In order to launch Polkadot in a transparent and decentralized way, an Ethereum smart contract was required to hold data necessary to the genesis of Polkadot including the Polkadot public key to associate to a specific allocation, the index of the public key, and the vested status of the allocation.

Submission of this data to the Ethereum blockchain enables the community to generate and verify the genesis chain specification themselves in an independent manner. It is an integral piece to the launch of Polkadot in a transparent way.

For this reason, the security of the contract was of the utmost importance, especially regarding the certain immutability of the state of the contract after claiming actions have taken place.

To guarantee that the Claims contract is secure and functionally correct, ChainSecurity formally verified the contract's code with respect to its intended specification. In more detail, ChainSecurity formalized 12 critical functional requirements and verified them using their state-of-the-art tool for formal verification. Examples of the properties that were verified include the immutability of the state after the initialization, access-control requirements, and safety of the contract set-up period.

In addition to the formal verification, the full audit report details each of the issues that were found in the categories of Security Issues, Trust Issues, and Design Issues. It also describes the fixes that were applied to each and reasoning of the Web3 Foundation.

You can find the full audit report here.

From the blog

Community

Racing Into the Future: Polkadot and Conor Daly Revolutionize Sports Sponsorship

Breaking new ground in sports sponsorship, the Polkadot community has chosen race car dynamo Conor Daly as its brand ambassador for the Indianapolis 500. This decision, decided using Polkadot’s decentralized governance feature, marks the first time a major athlete’s sponsorship has been determined by a community vote using blockchain technology.  What is Polkadot? A Closer Look Launched in 2020 by Ethereum Co-Founder Gavin Wood, Polkadot is a digital platform engineered to be the powerful, se

Technology

Elastic Scaling: Streamlining Growth on Polkadot

Elastic scaling is an extremely useful addition for parachains that need higher throughput than allowed by the current Polkadot protocol. This blog from Fatemeh Shirazi explains its importance and how this technical upgrade will come about. Polkadot’s mission is based on delivering a platform that focuses on excellent scaling and security. The aim is to allow decentralized applications to operate in the best conditions possible. Polkadot scales by applying hierarchy to the platform architectur

Product

JAM Session: Gavin Wood Reveals Bold Vision for Polkadot's Next Revolution

Yesterday at Token 2049 Dubai, Gavin Wood announced a bold vision for the next generation of Polkadot technology. In line with the other groundbreaking firsts that Polkadot has brought to the market, this new vision is set to revolutionize the future of Web3. It will provide the speed, scale, full decentralization, and ease of use needed to drive forward deep innovation across not just Web3, but the entire tech landscape. At the heart of this vision is JAM, a new version of the Polkadot chain t

Subscribe to the newsletter to hear about updates and events.