지금 프로젝트를 보호하세요
최대 규모의 웹3 보안 제공업체로 프로젝트를 강화하세요.
CertiK 보안 전문가가 귀하의 요청을 검토 후 곧 연락드리겠습니다.

BetProtocol’s Token Smart Contract Audit

Clients & Partners ·
BetProtocol’s Token Smart Contract Audit

BetProtocol enables entrepreneurs and independent developers to create better, sustainable gaming platforms with no coding required. Their toolkit ensures that compliance and safety are handled on the protocol level, allowing developers to focus on marketing and the content of their dApps, and not on the underlying infrastructure.

BetProtocol’s ecosystem is powered by their native token BEPRO. The token will facilitate collaboration among developers, oracle solvers, bookers and betters for an optimal network of betting dApps.

BEPRO Token Characteristics

From the developers perspective, dApps will spend BEPRO tokens to deploy (startup) and run (e.g: transacting bets) on the BetProtocol platform. Similarly, BEPRO tokens will be deducted from dApp balances according to the amount of betting transactions executed by that dApps. Meaning, developers will need to acquire more tokens to stay in operation. This will allow BEPRO to act a fuel that will push BetProtocol for consistent maintenance of the network.

Please read this article for in depth details.

From the users perspective, BEPRO tokens will serve as a means to:

  1. Initiate and resolve disputes: Tokens are required to create a dispute in the network to prevent spam.
  2. Pay for premium services: dApps can create premium services, such as gamification, in exchange for BEPRO
  3. Build their reputation in oracle participation: BEPRO tokens are needed to participate in oracle resolution to prevent bad actors and increase the quality of the truthfulness of oracles

In order to build a strong and secure foundation, BetProtocol worked with CertiK to ensure complete correctness of the BEPRO Token.

The Audit

CertiK’s smart level engine applied 100% formal verification coverage on the BEPRO token and distribution contract. Formal Verification mathematically proves that the code will work as intended, computing all possible scenarios. Because math is the only consistent language across the world, Formal Verification provides technical proof that the contracts are transparent, comprehensive, fast, and true.

CertiK’s team of engineers also scanned the source code using proprietary static analysis tools and manual code review methodologies. That end to end process ensures proof of stability as well as a hands-on, engineering-focused process to close loopholes and recommend simple design changes in accordance with the best practices in the space.

Smart Contract Recommendations

Overall we found the token to follow the best practices. After a few minor recommendations that BetProtocol reflected in their latest commit, we’re happy to conclude that the contract is structurally sound and not vulnerable to any classically known anti patterns or security issues. Below were CertiK’s recommendations, among others.

  1. We recommended BetProtocol to change the scope of functions setTokenAddress(), safeGuardAllTokens(), setTGEDate(), and triggerTokenSend() from public to external, since the functions are only called externally and never internally. This change can save gas and make scope and visibility clearer.
  2. We recommended BetProtocol to add constant keyword to never change variables like decimals, daysLockWhenD, month, and year.
  3. We recommended BetProtocol to remove variable day since if an above change happened, then the variable is never used.

About CertiK

CertiK leads blockchain security by pioneering the use of cutting-edge Formal Verification technology on smart contracts and blockchains. Unlike traditional security audits, Formal Verification mathematically proves program correctness and hacker-resistance. CertiK was founded by Computer Science professors of Yale University and Columbia University, securing over $5B in assets, including many of the world’s top projects.

The research efforts of CertiK have received grants from IBM and the Ethereum Foundation, and notable investors include Binance Labs, Bitmain, Lightspeed Venture Partners, Matrix Partners, and NEO Global Capital, among others.

To request the audit/verification of your smart contracts, please email [email protected] or visit certik.io to submit the request.

Twitter: https://twitter.com/CertiKCommunity

Reddit: https://www.reddit.com/r/CertiKOrg/

Telegram: https://t.me/certikorg

LinkedIn: https://www.linkedin.com/company/certik

About BetProtocol

BetProtocol enables entrepreneurs and developers to create gaming platforms in minutes. No coding required. Thanks to BetProtocol’s blockchain technology, these platforms are secure, scalable and regulatory compliant. Its vision is to enable anyone in the world to dream of being a gaming platform owner one morning, and actually be one that same day.

Join the conversation on Telegram.

관련 블로그

Binance Wallet Integrates CertiK’s Skynet Token Scan

Binance Wallet Integrates CertiK’s Skynet Token Scan

Binance Wallet is enhancing user security by integrating Skynet Token Scan, a powerful tool developed by CertiK’s security researchers. This new feature puts on-demand security intelligence directly into the hands of Binance Wallet users, empowering them to make safer, more informed decisions.

Move for Solidity Developers: Token Standard II — Advanced Fungible Token Extensions

Move for Solidity Developers: Token Standard II — Advanced Fungible Token Extensions

Building on our previous analysis of basic token functionalities across Solidity, Sui Move, and Aptos Move, this report focuses on the advanced features of fungible tokens. We specifically explore how these platforms implement fungible token standards, with extensions such as whitelisting/blacklisting, fee mechanisms, pausing, and whitelisting/blacklisting.

Pectra’s EIP-7702: Redefining Trust Assumptions of Externally Owned Accounts (EOAs) in EVM

Pectra’s EIP-7702: Redefining Trust Assumptions of Externally Owned Accounts (EOAs) in EVM

In this post, we examine how EIP-7702 reshapes core EVM assumptions, spotlight mocked examples, and provide actionable guidance for developers to assess whether their existing contracts may be vulnerable.