Quantstamp Retainer Proposal for Ongoing Audits

Summary

Quantstamp, Inc. has proposed a Security Partnership in the form of a Retainer Agreement to the Venus protocol.

The current planned list of audit priorities can be found below:

• Time-based contracts, needed for the deployment of Venus to Arbitrum or other networks where the block rate is not constant.
• Multichain governance, needed to allow Venus Governance to execute privilege commands on the new networks (Ethereum, opBNB, Arbitrum, Polygon zkEVM, etc.)
• wstETH oracle, needed for the deployment of the Liquid Staked ETH pool to Ethereum
• Cross-chain synchronization of the XVS voting power, taking into account the XVS staked into the vaults deployed to the different networks
• Seize of XVS rewards, allowing Venus Governance to seize XVS rewards from accounts like the BNB bridge exploiter and return them to the distribution wallet.
• VAI compatibility with Isolated pools, needed to deploy VAI to more networks

As Venus’s security partner, Quantstamp will provide Venus with 10 audit weeks worth of audit credits that may be used at any point during the year for auditing purposes. Each engagement in this retainer will be staffed with four (4) auditors and includes fix reviews and an in-depth review of both smart contract- and protocol-level security. The total cost is $130,000, which will be paid in four monthly installments of $32,500 in USDC from the Venus Treasury, with the first to be paid at the start of March 2024.

Partnership Scope

Quantstamp will provide the resources needed to perform ongoing security assessments of Venus’s codebase(s). If issues are found, Quantstamp will provide findings and options for Venus’s consideration as well as assistance to rewrite the code. Venus will be responsible for providing access to personnel, content, resources, systems, and information (including any consents, authorization, or licensing) as may be needed by Quantstamp to perform the activities under this partnership.

About Quantstamp

Quantstamp is a global leader in blockchain security, on a mission to secure the future of web3. As a global team of security professionals, Quantstamp has honed our expertise by auditing hundreds of leading projects and serving as a trusted advisor for startups, governments, NGOs, and the private sector, performing more than 700 audits and securing over $200 billion in digital asset risk from hackers to date.