Mission: Securing the Smart Contracts Ecosystem

Context: The Importance of Security

We all recognize the importance of security when surfing the Internet or installing applications from unverified sources. We also know how essential it is using anti-virus and firewalls to protect information on our devices. Similarly, we understand the importance of using proven applications without vulnerabilities, especially if those applications are finance-related.

As hackers may take advantage of a lack of security awareness and vigilance, popularity or simplicity cannot justify using a potentially dangerous program. Being a victim of a hack or virus designed to steal data or lock devices will definitely leave bad memories.

In other words, security is a requirement, as it prevents many potential issues.

But how much do we know about the security of blockchains and smart contracts? After all, blockchains and smart contracts are also part of the modern Internet and involve possibly vulnerable code.

Thanks to cryptography, block sequencing, decentralization, complex consensus mechanisms, and additional protections such as PirlGuard, Blockchains have proven to be highly secure.

Things are a little different with smart contracts and software that interacts with the blockchains. As a case study, let's look at the smart contracts themselves, and the security audits performed by Callisto Network's Security Department.

What is a Smart Contract?

Smart contract protocols are developed by programmers, they consist of a set of data and functions located at a specific address on the blockchain. They can be used in various fields: DeFi, property registration, asset issuance, voting, identification, and much more. Their main advantage is the ability to eliminate intermediaries and to complete quick transactions. Smart contracts can be decentralized or centralized, public or private, automated or executable after initiation.

Smart contracts rely on algorithms and operate according to clear sequences of actions. A contract will be executed, and the transactions will be conducted only if the conditions are fulfilled. Therefore, while smart contracts are complex in their structure, they greatly simplify and accelerate the verification and transaction process.

Why Audit Smart Contracts?

By identifying errors and vulnerabilities, audits help reduce the human factor in the smart contract operation. Hacking and stolen funds are a reputational blow. When a company doesn't own the smart contract's source code or hires many temporary employees, an audit can help to protect against malicious people who have access to the development.

The lack of proper auditing has repeatedly led to significant financial losses. An example is the famous TheDao hack on June 17, 2016, achieved using the "reentrancy attack". The vulnerability led to $3.6 million of Ether being stolen, equivalent to $50 million at the time. It also led to the Ethereum network splitting into 2 blockchains, Ethereum and Ethereum Classic.

Callisto Network Security Department

One of the main objectives of Callisto Network was the creation of a security department to audit smart contracts. Committed to improving the security of the whole industry, Callisto Network offers paid audits and free audits under certain conditions.

Callisto's free audit program aims to cover the most important and popular crypto projects that might cause the greatest damage to the ecosystem in case of hacking. The selected projects will be fully audited by security experts funded by the Callisto Network Treasury.

Audited smart contracts are provided with a special badge. The Proof of Security initiative has been launched to highlight projects with highly secure smart contracts. The proof of safety consists of a document containing a clear and understandable summary of the audit report aimed at the community and investors.