🔍Audits

Kodiak has done 3 rounds of audits on the core protocols and 1 round of audit focused on Panda Factory. In all audits - all issues raised have been addressed and no critical issues were found.

Core Protocol

December 2024, 0xMacro: focused audit on Kodiak Islands and Farms

289KB

kodiak_A3_by_0xmacro.pdf

pdf

April 2024, 0xMacro: Dex Core and Periphery, Islands, Farms, Tokens

491KB

kodiak_A1_by_0xmacro.pdf

pdf

February 2024, Kalos: Dex Core and Periphery, Islands, Farms, Tokens

3MB

[KALOS] KODIAK Audit Report (ENG).pdf

pdf

Panda Factory

October 2024, 0xMacro: Panda Factory

636KB

kodiak_A2_by_0xmacro.pdf

pdf

For technical reference, here is a brief technical overview of the various parts of the protocol:

• Dex V2: Exact fork of Uniswap V2

• Dex V3: Fork of Uniswap V3 with one small difference:

  • Modified feeProtocol to uint32 in slot0 (only relevant for integrators, not normal users)

• Kodiak Island: "Modified from" Arrakis V1 vaults (ArrakisFinance/vault-v1-core). Key differences:

  • Vaults are non-upgradeable after deployment (vs upgradeable in original implementation)

  • Simplified rebalances to enable "permissionless" fixed vault creation with no ownership

  • For managed vaults, rebalancing can route through liquidity throughout Berachain

• Kodiak Farm: "Modified from" Frax Communal Farm (FraxFinance/frax-solidity). Key differences:

  • Farms can be deployed permissionlessly via FarmFactory

• Panda Factory: Fully built in-house, very loosely "inspired by" pump.fun on Solana