ChainSecurity Ltd has completed a security audit of the Switcheo smart contracts. To find out more about the scope of the audit and considered properties see the full report.
Summary
Switcheo is creating a decentralized exchange (DEX) where users can trade Ether and any ERC20 tokens. Before being able to trade on the exchange, users have to deposit their ETH and/or ERC20 tokens to the Switcheo platform. To initiate transactions, users have to first sign the trade data off-chain. This signed data is then sent to Switcheo, which initiates transactions on the DEX on users’ behalf.
ChainSecurity Ltd analyzed the Switcheo smart contracts under different aspects, with a variety of tools for automated security analysis of Ethereum smart contracts, including Securify, and manual expert review. Overall, we found that Switcheo employs good coding practices and has a clean code base. Nonetheless, ChainSecurity Ltd was able to uncover several security, design, and trust issues that were successfully mitigated or addressed by Switcheo before deployment.