Summary
Q Blockchain implements EVM chain with a delegated proof of stake (DPoS) consensus mechanism, on-chain governance framework, built-in stablecoin system, and numerous other features. This assessment focused on changes that were performed on top of previously reviewed version. Notable changes are a switch of solidity compiler version, new price feed oracles and crypto wallet key protection mechanism for the on-chain stakers.
The most critical subjects covered in our audit are functional correctness, upgradeability and usability. Security regarding all the aforementioned subjects is good. The general subjects covered are code complexity and event handling. Security regarding those subjects is good.
In summary, we find that the codebase provides a satisfactory level of security. The remaining acknowledged but not fixed issues do not immediately impair the system, however, we still suggest addressing them in the future. Over time their significance might change and cause more serious consequences.
It is important to note that security audits are time-boxed and cannot uncover all vulnerabilities. They complement but don’t replace other vital measures to secure a project.
About Q Blockchain – System contracts v1.2
“Q combines the benefits of a public, open and decentralized ledger with the transparency of enforceable private contracts. Whether you want to interact with other businesses, build decentralized applications or simply send and receive tokens: Q is for you.”
The Q development team highly appreciates the audit performed by ChainSecurity. The matter of the audit consisted of a large number of highly interrelated smart contracts that compose a complex onchain protocol. The auditors' quick uptake and deep understanding of the overall system was very impressive. At the same time, their skill on the lowest coding level was equally impressive. The combination of these two qualities, among others, led to the discovery of some hard-to-spot yet easy-to-fix issues. With this code audit, the Q blockchain has reached a new level in terms of maturity and maintainability. For our ongoing development, we are already planning follow up audit sessions with ChainSecurity.
Tobias Latzke, Q Core Team