# Grant Application For Audit of ComposableCoW Smart contracts

**URL:** <https://forum.cow.fi/t/grant-application-for-audit-of-composablecow-smart-contracts/1743>\
**Category:** Funded Grants\
**Tags:** complete, grant-funded\
**Created:** [June 12, 2023, 1:12pm UTC](https://forum.cow.fi/t/grant-application-for-audit-of-composablecow-smart-contracts/1743 "2023-06-12T13:12:04Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![middleway.eth](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.cow.fi/middleway.eth/32/12_2.png) [@middleway.eth](https://forum.cow.fi/u/middleway.eth)\
**Post date:** [June 12, 2023, 1:12pm UTC](https://forum.cow.fi/t/grant-application-for-audit-of-composablecow-smart-contracts/1743/1 "2023-06-12T13:12:04Z")

</div>

**Grant Title:**

_Grant Application For Audit of ComposableCoW Smart contracts_

* * *

**Author:**

_middleway.eth_

* * *

**About You:**

BD lead and grants committee member

* * *

**Grant Category:**

Protocol features

* * *

**Grant Description:**

This grant application serves as a technical continuation of the grant for [composable conditional orders](https://forum.cow.fi/t/grant-application-composable-conditional-orders/1451).

After receiving audit offers from four prominent audit firms, together with the Safe team it was decided to share the cost of the audit and recommend [Ackee blockchain](https://ackeeblockchain.com/) as auditor for the ComposableCoW and ExtensibleFallbackHandler contracts.

The audit offer is attached [here](https://drive.google.com/file/d/1BM3K1T0yVkUuUB0oxHW7spSRQyHF0hjx/view).

* * *

**Grant Goals and Impact:**

Provide additional confidence in the security of the smart contracts in question, with the intention to use those contract in a production environment.

* * *

**Milestones:**

Since there are plans to add some extra code to the audit scope, which was not estimated in the original offer, I propose to set a budget ceiling above which a new grant proposal will need to be submitted.

| Milestone | Due Date | Payment |
| --- | --- | --- |
| Pre payment to reserve an audit slot | ASAP | 4000 DAI |
| Concluding payment after the audit results are ready to be published. | July 25th | Up to 7000 DAI |

* * *

**Funding Request:**

The original offer specified a cost of $16k which was decided to split equally between CoW Swap and Safe. The additional scope will result in an additional audit hours and cost TBD.

* * *

**Budget Breakdown:**

Funds will be used to pay for a full audit week which will cover ComposableCoW and ExtensibleFallbackHandler.

* * *

**!mainnet! Address (to receive the grant):**

Ackee is accepting DAI payments on mainnet to the following address:  
0x61F1b154f7E788F09fDD314464f89DdE8C7C537a

* * *

**Terms and Conditions:**

_Include the following line in your grant application:_

> By submitting this grant application, I acknowledge and agree to be bound by the CoW DAO Participation Agreement and the CoW Grant Terms and Conditions.

---

<div class="post-metadata">

**Author:** ![mfw78](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.cow.fi/mfw78/32/1598_2.png) [@mfw78](https://forum.cow.fi/u/mfw78)\
**Post date:** [June 12, 2023, 1:16pm UTC](https://forum.cow.fi/t/grant-application-for-audit-of-composablecow-smart-contracts/1743/2 "2023-06-12T13:16:09Z")

</div>

I’m in favour of this grant and am signalling such.

---

<div class="post-metadata">

**Author:** ![Chim9](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.cow.fi/chim9/32/417_2.png) [@Chim9](https://forum.cow.fi/u/Chim9)\
**Post date:** [June 12, 2023, 2:34pm UTC](https://forum.cow.fi/t/grant-application-for-audit-of-composablecow-smart-contracts/1743/3 "2023-06-12T14:34:51Z")

</div>

Audits are very important, I support this proposal.

---

<div class="post-metadata">

**Author:** ![middleway.eth](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.cow.fi/middleway.eth/32/12_2.png) [@middleway.eth](https://forum.cow.fi/u/middleway.eth)\
**Post date:** [June 16, 2023, 8:01pm UTC](https://forum.cow.fi/t/grant-application-for-audit-of-composablecow-smart-contracts/1743/4 "2023-06-16T20:01:24Z")

</div>

Grant proposal was approved on Sanpshot: [here](https://snapshot.org/#/cowgrants.eth/proposal/0x8cc87afe581d1ff462aaf542511f1d2beb941023d9056cfe1e80591758d94609)  
And was executed on Ethereum [here](https://etherscan.io/tx/0xbd94ac22d5542f53930fa7d1cc36b9f63e5bcca28841909d1b68815e0ff12e01)

---

<div class="post-metadata">

**Author:** ![middleway.eth](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.cow.fi/middleway.eth/32/12_2.png) [@middleway.eth](https://forum.cow.fi/u/middleway.eth)\
**Post date:** [August 10, 2023, 7:03pm UTC](https://forum.cow.fi/t/grant-application-for-audit-of-composablecow-smart-contracts/1743/5 "2023-08-10T19:03:37Z")

</div>

The audit was completed successfully 🎉  
[Here’s](https://github.com/cowprotocol/composable-cow/blob/main/audits/ackee-blockchain-cow-protocol-composablecow-extensiblefallbackhandler-report-1.2.pdf) the final audit report

**Update about the audit cost**  
Miscommunication about the audit scope coverage led to us to ask for a secondary offer that will cover the full required smart contract scope. The renewed offer document ([attached](https://drive.google.com/file/d/1fJiIQKl4B_20ya65hxX4KL-w5KKBP9NM/view?usp=drive_link)) a $24k payable out of which 8k was payed in advance.  
Given the cost is split between the Safe team and Grants DAO, a new proposal will be submitted asking for a 8k DAI payment on mainnet to an address provided by Ackee in their payment request document.

---

<div class="post-metadata">

**Author:** ![mfw78](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.cow.fi/mfw78/32/1598_2.png) [@mfw78](https://forum.cow.fi/u/mfw78)\
**Post date:** [August 11, 2023, 7:40am UTC](https://forum.cow.fi/t/grant-application-for-audit-of-composablecow-smart-contracts/1743/6 "2023-08-11T07:40:30Z")

</div>

I signal my intent to support a grant revising the budget for [Grant Application For Audit of ComposableCoW Smart contracts](https://snapshot.org/#/cowgrants.eth/proposal/0x8cc87afe581d1ff462aaf542511f1d2beb941023d9056cfe1e80591758d94609).

---

<div class="post-metadata">

**Author:** ![netrunner.eth](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.cow.fi/netrunner.eth/32/252_2.png) [@netrunner.eth](https://forum.cow.fi/u/netrunner.eth)\
**Post date:** [August 11, 2023, 9:01am UTC](https://forum.cow.fi/t/grant-application-for-audit-of-composablecow-smart-contracts/1743/7 "2023-08-11T09:01:04Z")

</div>

I concur with @mfw78, and signal my support

---

<div class="post-metadata">

**Author:** ![Chim9](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.cow.fi/chim9/32/417_2.png) [@Chim9](https://forum.cow.fi/u/Chim9)\
**Post date:** [August 11, 2023, 9:22am UTC](https://forum.cow.fi/t/grant-application-for-audit-of-composablecow-smart-contracts/1743/8 "2023-08-11T09:22:40Z")

</div>

I’m supporting this revision of the grant cost for the audit, as well.

---

<div class="post-metadata">

**Author:** ![mfw78](https://dub1.discourse-cdn.com/flex013/user_avatar/forum.cow.fi/mfw78/32/1598_2.png) [@mfw78](https://forum.cow.fi/u/mfw78)\
**Post date:** [February 24, 2025, 9:11am UTC](https://forum.cow.fi/t/grant-application-for-audit-of-composablecow-smart-contracts/1743/9 "2025-02-24T09:11:11Z")

</div>


