Summary
In our initial report, we reviewed the smart contracts of the multiply smart contracts. In this new report, we review an updated version of those smart contracts.
The flashloan provider was replaced to be the Maker Flash Mint Module. Now, instead of the AaveLendingPoolProvider’s address, the address of the flashloan provider is directly passed. However, any address implementing EIP-3165 can be passed as an argument.
Furthermore, the flashloan provider remains fully trusted.
About Oasis Multiply FMM extension
“Oasis.app mission is to provide the best and most trusted entry point to deploy your capital and benefit from all of the potential in DeFi. You can just connect your wallet, and borrow Dai by opening a Vault using your preferred crypto as collateral (such as ETH, wBTC, USDC, LINK and many more).
(…)
DeFi platforms like Oasis.app are reimagining the way access to financial products work – helping investors to unlock the potential of cryptocurrency, without having to deal with high costs and third parties.”
Chain Security's team showed a high level of professionalism in the essential/engineering area and communication. They were helpful and open for dialogue while providing expertise and recommendations. Oasis.app must be a product our users can trust. We look forward to continuing our work with Chain Security to assure this trust.
Lukasz Baksik, Head of Operations at Oazo Apps Ltd. (oasis.app)