Royco is a DeFi protocol that enables users to create markets for any onchain action. Built on Ethereum, Royco’s platform allows onchain users to participate in incentive opportunities previously only available to institutions.
Security Challenges Royco Faced
Royco V1 launched in October 2024 and has nearly $3B of TVL, but the Royco contributors sought an audit for Royco V2, a complete rewrite with a different architecture. Key challenges included:
New Architecture Risks: Since V2 was a full redesign, the team needed a thorough security review to ensure robustness.
Off-Chain Component Integration: The protocol relied on some off-chain components and an oracle for validation, introducing potential centralization risks that required careful scrutiny.
Nethermind’s Solutions
Nethermind Security conducted a full audit of Royco V2, addressing the following:
Comprehensive Review: A complete assessment of the new smart contracts, ensuring no major vulnerabilities existed.
Findings & Remediation: Identified 2 low-severity issues and 1 informational note, all of which were addressed by the Royco team.
Support & Communication: Provided clarifications via calls and Telegram, ensuring smooth resolution of findings.
Results Achieved for Royco
The audit successfully secured Royco V2 ahead of deployment:
Issues Resolved: All findings (2 lows, 1 info) were remediated, minimizing risks.
Through this engagement, Nethermind Security helped Royco strengthen its protocol, ensuring a secure foundation for its incentivized action market.