Switcheo Security Audit

About Switcheo

Switcheo Network is the first decentralized exchange on the NEO blockchain which now allows trading of Ethereum and NEO tokens. Switcheo’s goal is to achieve a DEX network with cross-chain swapping capabilities across popular blockchains, with a focus on delivering a world-class trading experience in a trustless and decentralized environment.

Find out more about the project at https://switcheo.network/.

Audit Summary

Switcheo is creating a decentralized exchange (DEX) where users can trade Ether and any ERC20 tokens. Before being able to trade on the exchange, users have to deposit their ETH and/or ERC20 tokens to the Switcheo platform. To initiate transactions, users have to first sign the trade data off-chain. This signed data is then sent to Switcheo, which initiates transactions on the DEX on users’ behalf.

ChainSecurity Ltd analyzed the Switcheo smart contracts under different aspects, with a variety of tools for automated security analysis of Ethereum smart contracts, including Securify, and manual expert review. Overall, we found that Switcheo employs good coding practices and has a clean code base. Nonetheless, ChainSecurity Ltd was able to uncover several security, design, and trust issues that were successfully mitigated or addressed by Switcheo before deployment.