Audit Portal

// report details

Zivoe Vault

Decentralized RWA Credit Protocol

1

Scheduled

2

In Progress

Completed

// Executive Summary

Runtime Verification Inc. was engaged by Zivoe to conduct a security audit of its Zivoe Vault functionality, focusing on the ZivoeVault, ZivoeRouter, and OCT_Convert contracts. This audit aimed to evaluate the security and correctness of the implementation, identify any exploitable vulnerabilities, and offer recommendations to enhance the system's reliability. The audit took place over one calendar week, from March 24 to March 31, 2025. The process began with a design review to understand the high-level intent and security-critical invariants of the vault system, followed by a detailed manual review of the Solidity implementation. This comprehensive approach was supported by Kontrol, a formal verification tool, to write and check invariants across symbolic state transitions, ensuring a thorough examination within the allocated timeframe.

// Metadata

Date Completed2025-03-31
Type of EngagementCode Review Audit
Codebase LinkGitHub

// Findings Summary

Critical/High
0
Medium
1
Low/Informative
5

// Reports

Zivoe Vault.pdf
download PDF