Universe XYZ Marketplace Audit#

Perfect Abstractions conducted a smart contract audit of Universe XYZ's Universe Marketplace from 21 February 2022 to 4 March 2022.

The git commit hash used for the audit is e88f77b124d513ee859ad56a106ecb88e131f7a0.

Auditors:

• Nick Mudge

Objectives#

1. Find bugs, inefficiencies and security vulnerabilities in the code base.
2. Make recommendations concerning bugs, inefficiencies and security vulnerabilities found as well as other recommendations that may improve the code base.

Scope#

The following files were audited:

• contracts/UniverseMarketplaceCore.sol
• contracts/UniverseMarketplace.sol
• contracts/ERC721FloorBidMatcher.sol
• contracts/transfer-proxy/TransferProxy.sol
• contracts/transfer-proxy/ERC721LazyMintTransferProxy.sol
• contracts/transfer-proxy/ERC20TransferProxy.sol
• contracts/transfer-manager/SimpleTransferManager.sol
• contracts/transfer-manager/UniverseTransferManager.sol
• contracts/transfer-executor/TransferExecutor.sol
• contracts/royalties/ERC2981Royalties.sol
• contracts/royalties/HasSecondarySaleFees.sol
• contracts/royalties/RoyaltiesRegistry.sol
• contracts/order-validator/OrderValidator.sol
• contracts/operator/OperatorRole.sol
• contracts/lib/BpLibrary.sol
• contracts/lib/LibAsset.sol
• contracts/lib/LibERC1155LazyMint.sol
• contracts/lib/LibERC721LazyMint.sol
• contracts/lib/LibFeeSide.sol
• contracts/lib/LibFill.sol
• contracts/lib/LibMath.sol
• contracts/lib/LibOrder.sol
• contracts/lib/LibOrderData.sol
• contracts/lib/LibPart.sol
• contracts/lib/LibSignature.sol
• contracts/lib/LibTransfer.sol
• contracts/asset-matcher/AssetMatcher.sol