BusyXChain
BusyXChain is a cutting-edge, ready-to-use blockchain network with unique properties, combining the advantages of public, hybrid, and private blockchains into a multilayer ”L1”. BusyXChain is a solution that connects multiple projects in one layer (L1) without the need for a secondary solution like bridges or cross chains. From 04/05/2022 to 04/06/2022, Busy Technology engaged CyStack to evaluate the security posture of BusyXChain infrastructure compared to current industry best practices.
Audit Projects > BusyXChain
Audit Report - BusyXChain
Type of audit
Blockchain Security
Language
N/A
Testing method
whitebox
Request date
2022-04-04T17:00:00.000Z
Revision date
2022-06-03T17:00:00.000Z
Status
completed
Target distribution
About Busy Technology R.S.O
Busy Technology R.S.O được thành lập vào năm 2020 và có trụ sở tại Praha (Cộng hòa Séc), phát triển các giải pháp Web 3.0.
Type
platform
Platform
N/A
Owner
Busy Technology R.S.O
Industry
blockchain
Assessment Checklist
Application Deployment and Configuration
Ensure server configuration, network infrastructure, web applications, files are handled correctly and securely.
User Identity Management
The application manages user identities well and does not cause problems in all use cases.
Authentication mechanism
Make sure the application's authentication mechanism has a reasonable logic, preventing the possibility of authentication bypass.
Decentralization mechanism
Check for privilege escalation, decentralization, or path traversal vulnerabilities.
Session management mechanism
Check for errors related to cookies and sessions.
Input data validation mechanism
Check for Reflected XSS, Stored XSS, SQL injection and other injection errors.
Error control ability
Ensure errors are handled properly and do not expose sensitive information through error notifications.
Encode
Test the application's encryption algorithms.
Business logic of the application
Check application integrity, conflict, and responsiveness.
Client-side issues
Check for security flaws that can be exploited from the client side.
About projects.blockchain-security Service
projects.about_blockchain-security