Enhancing the Security of the Mina Fungible Token Standard: Veridise Audit

Veridise's audit of the Mina Fungible Token Standard, commissioned by the Mina Foundation, found 13 issues across vulnerabilities, warnings and informational findings. The most serious was a potential denial-of-service attack caused by an overflow in a lazily-accumulated sum (V-MIN-VUL-003). Other findings flagged excessive trust placed in the deploying entity of default token implementations (V-MIN-VUL-004 and V-MIN-VUL-006), and unclear token ID permissions (V-MIN-VUL-005). The audit also recommended better documentation and reviewing the actions and reducers model, which attackers could exploit to shut down smart contracts.