We had the opportunity to work with 0xSimao as the Lead Senior Watson for the Mento x Good$ Integration audit. He identified multiple issues with exceptional thoroughness and ensured that each one was properly addressed and mitigated. We would be glad to work with him again in the future.
Mento
What it is
Mento issues local-currency stablecoins on Celo, exchanging them against reserve collateral through pricing modules.
What was reviewed
One competition on a protocol update, October 2024, first place.
What was found
5 findings, all of them medium severity, and between them every issue the competition surfaced: nothing raised by another participant was missed.
Featured finding
Mento issues GoodDollar, a basic-income currency, by moving funds into a reserve and minting against them. The mint could be called at a moment when it issues nothing, so the funds arrived in the reserve with no currency created for them and no way back out.
As designedFunds move into the reserve↓The mint issues currency against them↓The reserve backs exactly the currency in circulation
The path the bug allowedFunds move into the reserve↓The mint is called at a moment when it issues nothing↓No currency is created for the funds that arrived↓The funds are stranded in the reserve with no way back out
