Why We Take Audits Seriously?

Idli Money
3 min readDec 5, 2020

The security of our contract has been the top priority for us from day one. We took every precaution to make our system safe for everyone to use. Especially the volatile gambling market, the more security we consider the most important factor to secure users’ assets on the platform.

Why is it important? Unlike traditional software, smart contracts cannot be upgraded whenever a problem is discovered. When a developer finds a bug in their phone application, they can simply fix it, create a new version, you download it, and everyone moves on. With smart contracts, since the code resides on Tron Chain, it is immutable. This is both good and bad.

The bad part is obviously that if there are bugs, there isn’t much one can do about it. Even worse, since tokens are frequently related to money, bugs are particularly worrisome (not as bad as bugs in aerospace, but still bad). The good part is that the smart contract code for the token is on the Tron Smart Chain and cannot be removed from there. Rest assured, you will always know that the code is the same code that was audited. In more traditional software, code can be reviewed and audited but, updates may not be. For smart contract code, you can always be sure of exactly what the code is.

Audit Scope and Details

The main goal of the audit was to review the Solidity implementation to uncover bugs that could compromise the software in production. The team audited the design and implementation of the following smart contracts:

The auditing process pays special attention to the following considerations:

  1. Testing the smart contracts against both common and uncommon attack vectors.
  2. Assessing the codebase to ensure compliance with current best practices and industry standards.
  3. Ensuring contract logic meets the specifications and intentions of the client.
  4. Cross referencing contract structure and implementation against similar smart contracts produced by industry leaders.
  5. Thorough line-by-line manual review of the entire codebase by industry experts.
  6. Idli Money Token follow the rules that tokens should follow to function in the Tron Chain ecosystem
  7. Swap
  8. Staking
  9. Gambling

The goal of this audit was to review the Solidity implementation for its business model, study potential security vulnerabilities, its general design and architecture, and uncover bugs that could compromise the software in production.

The findings of the initial audit have been conveyed to the team behind the contract implementations and the source code is expected to be re-evaluated before another round of auditing has been carried out.

Final Thoughts and Message to Holder’s

We invite some best audit firms in DEFI industry to audit the contracts. First firm to confirm audit of Idli.Money on its official Reddit account will win this job.

The interaction with the audit team was very constructive as they provided us with valuable insights on how we could improve the security of our code. But all is still under review and we think it will be good for IDLI MONEY Users.

We really appreciate the perseverance and integrity that they have shown during all steps of the audit.

All comments that were raised during the audit were addressed to the satisfaction of the audit team.

As a closing remark, we would like the users of Idli.Money to verify the integrity of the code for themselves.

The code will be open sourced for anyone to review.

As we say in our industry; Don’t trust, verify.

Don’t forget to Follow us on: Twitter , Telegram Channel , Facebook

Disclaimer: Trading crypto products carries a high level of risk, including the risk of losing substantially more than your initial investment. It is not suitable for everyone. Before you make any decision in relation to a financial product you should obtain and consider our Product Disclosure Statement (PDS) and Financial Services Guide (FSG) available on our website and seek independent advice if necessary

--

--