Skip to content

BOB Protocol contracts 1.0.0
Compare
Choose a tag to compare
@akolotov akolotov released this 06 Jan 19:45
· 26 commits to master since this release
1.0.0
c78a75c
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

What's Changed

This release contains the changes made to address the following findings discovered during a security audit:

  • Fix executeRecovery re-entrancy (#31)
  • Add missing sanity checks (#32)
  • Emit missing events on important configuration changes (#33)
  • Fix comment field order (#34)
  • Added comment to not use tokens with reentrant transfers (#37)
  • Return extra data from farmExtra call (#39)
  • Forbid deposit transactions with negative token delta (#42)
  • Add sanity checks on uint conversion limits (#44)
  • Fix permit-related issues (#43)
  • Fix state writing order (#45)
  • Add warning comment for possible sellForETH slippage (#47)

Also the following fixes and improvements were included:

  • Renounce BobVault implementation ownership in constructor (#35)
  • Add BobVault shortcut method for updating yield params (#36)
  • Fix amount field in invest event (#40)
  • Add test coverage report in CI (#46)

Full Changelog: 1.0.0-rc2...1.0.0

Assets 2
Loading