The XDEFI Wallet blog has been moved.

You can find this article here: https://www.xdefi.io/kudelski-audit/

Kudelski Architecture and Code Review - 2021

In March, the Kudelski Security Team conducted an audit of the wallet extension at the request of the XDEFI team.

The audit comprised of three key review elements covering:

  • Architecture
  • Code
  • Implementation

The auditors identified noteworthy points across a spectrum of severity amounting to 4 High, 3 Medium, 1 Low, and 18 Informational findings.

All High, Medium and Low findings were remediated at the end of March (shortly after receipt of the report), with the Kudelski Security Team reviewing and approving all fixes (as noted below).

Architecture Review

Kudelski concluded that the architecture of XDEFI Wallet is well designed and well implemented, as supported by a high architecture fitness score of 8.5/10.

You can find the full audit report here

Review of June

Upon receipt of the advice of the auditor at the end of March, XDEFI identified 4 area’s with deficiencies which if addressed would ultimately strengthen the product. These areas were in Maintainability, Testability, Reusability and Debug-ability/Monitoring — all of which were included in the informal findings Kudelski included in March (above).

Upon receipt of these findings, our team worked on immediately addressing and rectifying ahead of the June review.

The June review found that all issues and deficiencies had been addressed, and a Letter of Attestation was provided by the Kudelski Security Team to confirm these issues had been remediated

The Letter of Attestation can be found here

Unlisted

--

--

--

A chain agnostic wallet. Store, receive and send all your digital assets irrespective of their native chain. Connect to your favourite dApps.

Love podcasts or audiobooks? Learn on the go with our new app.

Stop Emailing Yourself: Send Files Like You’re in The IT Department

Puffin for Human Rights

How to root Fly IQ447

Root LG Phone

Presale today ~ Opening SOON!!!

{UPDATE} Myths of the World Hack Free Resources Generator

{UPDATE} Mr. Doodle! Hack Free Resources Generator

Worried About Cybersecurity? Let Buglab Rescue You!

Weeknotes s01e19

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store
XDEFI Wallet

XDEFI Wallet

A chain agnostic wallet. Store, receive and send all your digital assets irrespective of their native chain. Connect to your favourite dApps.