Krystal DeFi audit details

• Total Prize Pool: $20,000 in USDC
  • HM awards: $15,840 in USDC
  • QA awards: $660 in USDC
  • Judge awards: $3,000 in USDC
  • Scout awards: $500 in USDC
• Join C4 Discord to register
• Submit findings using the C4 form
• Read our guidelines for more details
• Starts June 21, 2024 20:00 UTC
• Ends July 1, 2024 20:00 UTC

This is a Private audit

This audit repo and its Discord channel are accessible to certified wardens only. Participation in private audits is bound by:

1. Code4rena's Certified Contributor Terms and Conditions
2. C4's Certified Contributor Code of Professional Conduct

All discussions regarding private audits should be considered private and confidential, unless otherwise indicated.

Automated Findings / Publicly Known Issues

The 4naly3er report can be found here.

Note for C4 wardens: Anything included in this Automated Findings / Publicly Known Issues section is considered a publicly known issue and is ineligible for awards.

Overview

Krystal's smart contracts simplify the experience of managing liquidity on concentrated liquidity DEXs, such as
Uniswap V3 or Quickswap V3, by providing these features:

• Zap In: Swap any token and add the resulting liquidity to the pool.
• Adjust: Withdraw all liquidity from your current position, including unclaimed fees, and then re-add it to a new position.
• Compound: Claim your unclaimed fees and automatically add them back to your current position.
• Zap Out: Withdraw all liquidity and unclaimed fees from your position, then swap them to any token.

Users can use any features above in one single transaction. They can leverage these features through the smart contract
V3Utils for manual control. Alternatively, they can allow Krystal to automate the process through the V3Automation smart contract.

Links

• Previous audits: N/A
• Documentation: https://docs.krystal.app/
• Website: https://krystal.app/
• X/Twitter: https://twitter.com/KrystalDefi
• Telegram: https://t.me/KrystalDeFi_Global

---

Files in scope

See scope.txt

Files out of scope

See out_of_scope.txt

Scoping Q & A

General questions

ERC20 token behaviors in scope

External integrations (e.g., Uniswap) behavior in scope:

EIP compliance checklist

N/A

Additional context

Main invariants

N/A

Attack ideas (where to focus for bugs)

N/A

All trusted roles in the protocol

Describe any novel or unique curve logic or mathematical models implemented in the contracts:

N/A

Running tests

git clone https://github.com/code-423n4/2024-06-krystal-defi.git
cd 2024-06-krystal-defi
forge update # Install dependencies
cp sample.env  .env

forge test --gas-report

To run code coverage

forge coverage

Miscellaneous

Employees of Krystal and employees' family members are ineligible to participate in this audit.