We recommend that Tracer DAO should evaluate engaging Sigma Prime for a security audit of Tracer’s code. You will find below below:
- Sigma Prime’s proposed remuneration and deliverables for these services (including a Services Agreement prepared by Sigma Prime); and
- A technical implementation for the audit.
If DAO members are in favour of the audit, a formal proposal to the DAO must be made and approved to appoint Sigma Prime.
Tracer DAO is considering engaging Sigma Prime for an audit of Tracer’s code.
This audit will likely be a month long process, during which Sigma Prime will detail any errors found with the Tracer Perpetual Swap codebase and initial factory smart contract implementation. Sigma Prime are a preeminent auditing team, and, if engaged by the Tracer DAO, will commence work on 15 March 2021. The Lion’s Mane team would work with Sigma Prime throughout the audit to fix any bugs and help them to navigate and understand the codebase.
This initiative aligns with the Tracer Whitepaper (Tracer: Perpetual Swaps), where it is suggested that Tracer DAO should adhere to strict security standards in relation to smart contracts within the Tracer ecosystem.
The current Perpetual Swap codebase can be found here: Lion’s Mane Github.
Sigma Prime has requested 112050 USDC, transferred upfront, to pay for the audit.
- Sigma Prime’s Address: 0x9CE6e6E4D9C9d6163258Db90a4AAB86ef4d1F7D5
If Sigma Prime is engaged by Tracer DAO via proposal, it will provide the services in accordance with the Services Agreement below:
In order for Sigma Prime to be engaged to provide the services described here, the following targets and relevant proposal data must be passed to the DAO, via Proposal, by a current DAO member, in order to facilitate the execution of that Proposal. For each piece of Proposal data provided, the function encoded data that must be passed into the DAO is present, as well as the parameters and function calls used to generate this data. By utilising a package such as web3, any DAO member may verify this data using the web3.eth.abi.decodeParameters function (web3.eth.abi — web3.js 1.0.0 documentation).
The steps that the DAO must execute in order to appoint Sigma Prime are as follows:
- Transfer 112050 USDC tokens to Sigma Prime (0x9CE6e6E4D9C9d6163258Db90a4AAB86ef4d1F7D5).
The following is the data that must be passed to the DAO, via Proposal, as well as the relevant raw data in order to verify the correctness of the Proposal data.
Name: Transfer 112050 USDC tokens to Sigma Prime
target: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48 (USDC Token Address)
- Function: transfer
- Type: address
- Name: recipient
- Value: 0x9CE6e6E4D9C9d6163258Db90a4AAB86ef4d1F7D5
- Type: uint256
- Name: amount
- Value: X
A slight technical error in the proposal data was found within the Sigma Prime Audit proposal above. The amended proposal now accommodates USDT instead of USDC. If another DAO member would like to push the amended proposal in the following link that would be greatly appreciated.