Summary
The most critical subjects covered in our audit are functional correctness, access control and signature handling. Security regarding all the aforementioned subjects is high. The general subjects covered are code complexity, specifications, and trustworthiness. The codebase is well structured, and specifications are satisfactory. Each Argent account has a trusted owner that has the ultimate control of an account and sets the rules for recovery. If owners enable recovery functionalities, they can choose any party to serve as guardian for their account.
In summary, we find that the codebase provides a high level of security.
It is important to note that security audits are time-boxed and cannot uncover all vulnerabilities. They complement but don't replace other vital measures to secure a project.
About Argent Account
Argent implements Argent account and Multisig account which are a set of smart contracts build on top of Account Abstraction of Starknet. Each Argent account is controlled by an owner who can use different signing methods to submit transactions to the account. The owner can set guardians to increase the security of their accounts, and help in recovery in case the private key is lost. Each Multisig is controlled by several signers, and a guardian can also be set for account recovery.
---
Argent is a self-custody smart wallet for Starknet with over 2 million downloads. Their smart wallets offer advanced security features, including 2FA, Fraud Protection, and no seed phrase. Argent's Starknet smart contract secures over half a billion dollars and is trusted by leading centralised exchanges. In their six years of building smart wallets, Argent’s smart contracts have never been breached.
ChainSecurity demonstrated exceptional professionalism and expertise throughout the audit. They posed insightful and thought-provoking questions, showcasing great attention to detail. Undoubtedly, they are one of the best teams out there. Julien Niset, Co-founder & CSO @ Argent