audits

Security Audits

This directory contains security audit reports for the ParaSwap Miro Staking protocol.

Audit Summary

Auditor	Date	Version	Scope	Commits Audited	Status
PeckShield	2025-02-28	v1.0	VLR Token Contract	d29d6dc → 5154644	✅ Issues resolved
AstraSec	2025-05-25	v2.0	Full Protocol	20e9610 → 609701a	✅ Issues resolved
PeckShield	2025-05-30	v1.0.1	Miro Staking Contracts	Updated report	✅ Current

Final Audited Commit:

This commit 609701a represents the final state of the codebase after all audit findings were resolved.

Issues Summary

Total Issues Found: 7

• Critical: 0
• High: 0
• Medium: 3 (all resolved)
• Low: 4 (3 resolved, 1 acknowledged)

All security vulnerabilities have been addressed. The only remaining items are centralization concerns that will be mitigated through planned multisig governance.

Core Contracts Audited

• seVLR.sol - Main staking contract
• MiroMigrator.sol - Migration and cross-chain bridging
• BridgeStaking.sol - Cross-chain staking helper
• TimeLockedERC20.sol - Base time-locked token
• ERC20UtilsLib.sol - Utility library

File Naming

Audit reports follow the format: YYYY-MM-DD-auditor-scope-[version].pdf