Belaying the Fuji climbing

Since the beginning at FujiDAO, we’ve considered security as fundamental to our long-term development. On receiving our funding back in March, we scheduled audits with some of the major security companies in the ecosystem.

It can be difficult for new projects to book audits considering the large expense and long waitlists for booking a slot with these major companies. However, due to the insufficient offer compared to the rapid growth happening in DeFi, some companies innovate the security field by providing different services aside from the classic “one-time” audits.

During the period between scheduling the audits, and receiving the results, we had to find other ways to ensure the safety of our contracts, in order to launch our first product on Ethereum.

After we scheduled the audits back in March, we remained proactive on the security side, and we haven’t waited for the final results to ensure the protocol’s safeness.

Before anything else, our core team’s experience in development ensured a high baseline of security, in fact, the common bugs and hacks are well known in the space, and they’re avoidable without external support.

However, this experience alone is not enough to find the most novel threats.
Over the past few years, some Ethereum developers specialized in the security field and started to support the projects building on the Ethereum Virtual Machine.

That’s the path we chose at first, relying on the external support of more experienced developers working on different projects. They reviewed our contracts not only to find potential threats but also to find ways to make our architecture more efficient.

What we found interesting in their approach is that, aside from providing one-time audits, they also invited us to participate in a threat modeling session. The objective of this course was to teach us the method and process to look for potential threats by ourselves.

Giving us the fish is good, but teaching us how to catch the fish by ourselves increases our autonomy and lets us find potential exploits along the road while improving the overall team experience in that field.

It’s been almost a year since FujiDAO started and we’re now proud to publicly release our audit reports. It’s another step in the journey, the required step to innovate while ensuring our code is safe and bulletproof when handling our users’ funds.

No main threats were detected in these audits, and after some back and forth between our teams, some minor elements in our architecture were improved.

DeFi is growing and attracting new people, gathering billions of dollars in value locked, the security domain needs to keep up and innovate to ensure the safety of more and more protocols.

We recommend every DeFi team not neglect this part of the equation, it might slow your project and be expensive in the short term, but this effort will considerably ensure your growth and reputation over the long run.

Keep in mind that an audit isn’t a full guarantee against hacks and bugs, since contracts are written and inspected by humans, there can be errors, or malicious attackers finding new ways of exploiting smart contracts.

New users should consider doing their own research before using any DeFi protocol, don’t trust teams or contracts blindly, but rely on experts to verify the audits of a specific project.

Related posts:

Short films are usually the province of festivals and film school, not necessarily for mainstream consumption. One interesting aspect to this brand of filmmaking is there are often short pieces by…

The world is troubled. As you tread down the aisle of a supermarket, you can hear it. When you look at people’s faces, you see it. When you look out the window to choose your clothes, you feel it. I…

The automotive industry has has increased in sales in today’s generation. One of the factors that affect this increase is the lifestyle of people nowadays and social media has also helped in the…