Update: April 22nd - 1DEX Security Review
In continuation of the audit partnership between 1INTRO and FYEO, FYEO has now completed a review of the 1DEX program for Solana. The review revealed a well-structured codebase, implemented with a commendable emphasis on security practices. You can find the detailed audit report below. 1DEX is a DEX platform on Solana that enhances crypto trading and liquidity management through innovative AMM algorithms. It offers unique features like integration with 1INTRO LBP product for seamless liquidity transitions and uses weighted pools for more flexible liquidity management. Also, in our roadmap, 1DEX plans to introduce more innovative AMM mechanisms and leverage AI to optimize liquidity management and improve the user experience.
What is 1INTRO?
1INTRO is an All-in-One liquidity powerhouse that brings efficiency, fairness, and safety to Solana through AI. The protocol’s AI-driven liquidity engine optimizes all aspects of decentralized trading, along with Liquidity Bootstrapping Pools (LBPs) for fair and transparent token launches. 1INTRO makes it easy for projects to bootstrap liquidity and access AI-driven automation to manage and grow their token ecosystems, while giving traders a seamless and secure trading experience with advanced features. 1INTRO is on a mission to bring fairness to Solana.
About the audit
The review was centered on the 1INTRO Solana program. It was observed that the program demonstrates adept utilization of the Anchor framework, effectively leveraging all available safety features. This meticulous approach culminates in the development of a robust and reliable program.
The FYEO Process
When FYEO performs an assessment, we focus on the code committed at a specific time when the code base is feature complete.
Our goal is to give our clients the following:
A better understanding of its security posture and help them identify current and future risks in its deployed chain & contract infrastructure.
An opinion on what security measures are in place regarding maturity, adequacy, and efficiency.
Identify potential issues, including loss of funds scenarios, and include improvement recommendations based on the result of our assessment.
Give the development team a better understanding of writing and maintaining more secure code. The incremental increase of security is part of the overall increased quality of the project.
Findings and Report
During the security assessment, we uncovered:
4 findings with MEDIUM severity rating.
4 findings with LOW severity rating.
1 finding with INFORMATIONAL severity rating.
Findings and Report 1DEX
2 findings with LOW severity rating.
3 finding with INFORMATIONAL severity rating.
Once notified, the 1INTRO team was quick to address and remediate these findings for both security reviews. You can find a public version of the reports available below.