CAYA is pleased to present this audit report outlining our assessment of code, canister smart contracts, and other important audit insights and suggestions for management, developers, and users.
DIP20 is a fungible token standard for the Internet Computer. This standard allows for a common and familiar interface that not only provides a quick entry point for existing blockchain developers, but future interoperability options between the Internet Computer and Ethereum, through the process of sustaining the same shared interfaces. The scope of the audit includes the basic canister of the token standard, which carries out token transfer operations, mints, burns. It is also possible for the owner to set various token settings and manage the commission percentage. In addition, the canister defines different types of errors for each possible situation and provides for the recording of performed operations, that is, records of transactions are kept. It is worth noting that there are system functions that perform a number of actions in the case of a canister update. To support the logic of the token and the correctness of transactions, additional functions from auxiliary root files are also used.
CAYA is pleased to present this audit report outlining our assessment of code, canister smart contracts, and other important audit insights and suggestions for management, developers, and users.
Severity of the issue
Total found
Resolved
Unresolved
Evaluating the findings in this report, the CAYA auditors can state that the canisters are operational and secure. Under the given circumstances, we set the following risk level:
To set the codebase quality mark, our auditors are evaluating the initial commit given for the scope of the audit and the last commit with the fixes. This approach helps us adequately and sequentially evaluate the quality of the code. Code style, optimization of the canisters, the number of issues, and risk level of the issues are all taken into consideration. The CAYA team has developed a transparent evaluation codebase quality system presented below.
Severity of the issue
Issue severity
Total found
Resolved
Please note that the points are deducted out of 100 for each and every issue on the list of findings (according to the current status of the issue). Issues marked as “not valid” are not subject to point deduction.
Score
Based on the given findings, risk level, performance, and code style, CAYA team can grant the following overall score:
![](https://cdn.prod.website-files.com/61efadf06b5315901ac6f40a/651a5bccf07166282c2a52f9_Group%2016814%20(2).svg)
Please be aware that this audit does not certify the definitive reliability and security level of the canister smart contract. This document describes all vulnerabilities, typos, performance issues, and security issues found by the CAYA audit team. If the code is still under development, we highly recommend running one more audit once the code is finalized.
![](https://cdn.prod.website-files.com/61efadf06b5315901ac6f40a/651d49f131126e93364a6bc2_Group%2017009.svg)