Summary
The most critical subjects covered in our audit are functional correctness & equivalence, precision of arithmetic operations, and access control. Precision of arithmetic operations can be improved, see CurveLib: Rounding Error Amplification.
The general subjects covered are code consistency, and migration considerations. See Inconsistency.
In summary, we find that the codebase provides a high level of security.
It is important to note that security audits are time-boxed and cannot uncover all vulnerabilities. They complement but don't replace other vital measures to secure a project.
About Sky Diamond PAU
Sky designs Diamond PAU (Parallelized Allocation Units), a modular architecture using the EIP-2535 Diamond proxy pattern. It is designed to replace the legacy ALM Controller with a faceted approach where controller actions are deployed as separate contracts and can be shared with different ALM Controllers. The current implementation achieves librarification of the existing ALM Controller to facilitate a future Diamond upgrade.
