A collection of shared resources and utilities for the Aragon OSx DAO Framework and plugin developers

Halborn: audit report

• Commit ID: 4eca1de80e60f5f516e8f15b45f91e05ea5348e8
• Started: 2024-11-18
• Finished: 2025-02-13

The root folder of the repo includes four subfolders:

.
├── configs
├── contracts
├── sdk
├── ...
└── package.json

• The configs folder contains general configurations such as the contract addresses for each network that Aragon OSx has been officially deployed to, which are importable in JS/TS code.
• The contracts folder contains Solidity smart contracts being used by the OSx framework and for plugin development.
• The sdk folder contains various JS/TS helper functions that can be used in the OSx repo and plugin repos for for testing and deployment.

The root-level package.json file contains global dev-dependencies for formatting and linting. After installing the dependencies with

yarn install

you can run the associated formatting and linting commands.

yarn prettier:check

all .sol, .js, .ts, .json, and .yml files will be format-checked according to the specifications in .prettierrc file. With

yarn prettier:write

the formatting is applied.

With

yarn lint

.sol, .js, and .ts files in the subfolders are analyzed with solhint and eslint, respectively.

To be able to work on the contracts, make sure that you have created an .env file from the .env.example file and put in the API keys for

• Alchemy that we use as the web3 provider
• the block explorer that you want to use depending on the networks that you want to deploy to

You can also change the default hardhat private key (PRIVATE_KEY="0xac0974bec39a17e36ba4a6b4d238ff944bacb478cbed5efcae784d7bf4f2ff80"). Note however, that the contracts in this repo are not meant to be deployed directly.

Our smart contracts undergo regular audits.

Version 1.0.0 of osx-commons-contracts has been audit when it was part of the aragon/osx repo.

Halborn: link 1, link 2

• Commit ID: cb0621dc5185a73240a6ca33fccc7698f059fdf5
• Started: 2023-02-07
• Finished: 2023-02-24

Version 1.3.0 of osx-commons-contracts has been audit when it was part of the aragon/osx repo.

Code4rena: link 1, link 2

• Commit ID: a2461ae61a8c4cc833a117120b76e306936f5e1c
• Started: 2023-03-03
• Finished: 2023-03-10

Halborn: link 1, link 2

• Commit ID: 0ad8cad2bb661fbd53086d097d11228304d9b73e
• Started: 2023-05-29
• Finished: 2023-06-13

If you like what we're doing and would love to support, please review our CONTRIBUTING_GUIDE.md here. We'd love to build with you.

If you believe you've found a security issue, we encourage you to notify us. We welcome working with you to resolve the issue promptly.

Security Contact Email: [email protected]

Please do not use the issue tracker for security issues.