Audits

Audits of UMA and YAM contracts

UMA Contract Audits

For the most up to date information about UMA's audits, known issues, and areas of research, please see this page which is maintained by the UMA team:

Known Issues | UMA Docs

The contracts in the common directory and the oracle directory of the /protocol repo have been carefully audited by OpenZeppelin.

UMA Audit - Phase 1 - OpenZeppelin blogOpenZeppelin blog

Here is Phase 2 of the OpenZepplelin Audits

UMA Audit – Phase 2 - OpenZeppelin blogOpenZeppelin blog

Flash loan mitigations for the voting contracts were also audited by OpenZeppelin.

UMA Audit - Phase 3 - OpenZeppelin blogOpenZeppelin blog

OpenZeppelin also audited the Optimistic Oracle.

UMA Audit - Phase 4 - OpenZeppelin blogOpenZeppelin blog

Additionally, OpenZeppelin audits incremental upgrades to UMA's contracts on a continuous basis.

UMA Continuous Audit - OpenZeppelin blogOpenZeppelin blog

YAM Contract Audits

There are currently no YAM-build smart contracts used in Degenerative. Any future audits will be added here.