diff --git a/README.md b/README.md index cd102095..fc00692f 100644 --- a/README.md +++ b/README.md @@ -59,32 +59,58 @@ All the information about setup of the project and deployments can be found [HER |
Celo

Celo

| - | [0x91b21900E91CD302EBeD05E45D8f270ddAED944d](https://gnosisscan.io/address/0x91b21900E91CD302EBeD05E45D8f270ddAED944d) | - - - - - -
-## Security +## Changelog +### V1 +- Date: 29 Oct 2023 +- Forum discussions and proposals: + - [Recap](https://governance.aave.com/t/bgd-a-di-aave-delivery-infrastructure/13951) + - Activation [Proposal](https://governance-v2.aave.com/governance/proposal/355/) +- Security: + - Extensive testing and internal review by the BGD Labs team. + - [Tests suite](./tests/). + + - We have engaged [Emanuele Ricci](https://twitter.com/stermi) as external security partner in middle stages of the project, with outstanding results. This procedure was focused on non-biased modelling of the system in terms of flows and any kind of security problem and/or state inconsistency, keeping a tight feedback loop with the development team. + + - Extensive properties checking (formal verification) procedure by [Certora](https://www.certora.com/), a security service provider of the Aave DAO. + - [Report](./security/certora/Formal%20Verification%20Report%20of%20Aave%20Delivery%20Infrastructure.md). + - [Properties](./security/certora/properties). + + - Security review by [SigmaPrime](https://sigmaprime.io/), another security service provider of the Aave DAO. + - [Reports](./security/sp). + - [Test suite](https://github.com/sigp/aave-public-tests/tree/main/aave-delivery-infrastructure/tests). +- Diff: Release branch created [here](https://github.com/bgd-labs/aave-delivery-infrastructure/tree/release-v1.0.0) + + +### Post V1 Maintenance Proposals +- Date: 22 Mar 2024 +- Forum discussions and proposals: + - [Update a.DI implementation and CCIP adapters](https://vote.onaave.com/proposal/?proposalId=56&ipfsHash=0xfd641d22acacbcc09b476a08bb21c127dfc6d53b511bc7dc022135387159e3fd) + - [Native bridge adapters update](https://vote.onaave.com/proposal/?proposalId=70&ipfsHash=0xe49d4ab826f1db54eda94e9d5ff536cb80d09ea4f0d6d36829f2626c95cac5f1) + - [LayerZero bridge adapter update to V2](https://vote.onaave.com/proposal/?proposalId=83&ipfsHash=0x309c9f0c885674230940e60b2a8e6fba9a226483d9117ba916ef72d4e3bd013f) + - [Hyperlane bridge adapter update to V3](https://vote.onaave.com/proposal/?proposalId=92&ipfsHash=0xb1cc692a9f2bed0923862de7ff7e603805f38b1b9da844a9977db9dec966b93e) +- Security: + - Proposals where reviewed internally and by Certora +- Diff: + - Release branch created [here](https://github.com/bgd-labs/aave-delivery-infrastructure/tree/release-revision-2) + - diff with V1 [here](https://github.com/bgd-labs/aave-delivery-infrastructure/compare/release-v1.0.0...release-revision-2) + +### V1.1 +- Date: +- Forum discussions and proposals: + - The V1.1 update consists on adding a shuffling mechanism to CCC and the addition of a new Granular guardian contract. A more in debth explanation can be found [here](https://governance.aave.com/t/bgd-a-di-aave-delivery-infrastructure-v1-1/17838) +- Security: + - Granular Guardian: + - [Report](security/certora/reports/Granular-Guardian-Access-Control.pdf) + - Shuffling: + - [Report]() + - [Properties](./security/certora/properties) +- Diff: + - Release branch created [here]() + - diff with V1 Maintenance [here]() -The following security procedures have been applied: -- Extensive testing and internal review by the BGD Labs team. - - [Tests suite](./tests/). -- We have engaged [Emanuele Ricci](https://twitter.com/stermi) as external security partner in middle stages of the project, with outstanding results. This procedure was focused on non-biased modelling of the system in terms of flows and any kind of security problem and/or state inconsistency, keeping a tight feedback loop with the development team. - - -- Extensive properties checking (formal verification) procedure by [Certora](https://www.certora.com/), a security service provider of the Aave DAO. - - [Report](./security/certora/Formal%20Verification%20Report%20of%20Aave%20Delivery%20Infrastructure.md). - - [Properties](./security/certora/properties). - -- Security review by [SigmaPrime](https://sigmaprime.io/), another security service provider of the Aave DAO. - - [Reports](./security/sp). - - [Test suite](https://github.com/sigp/aave-public-tests/tree/main/aave-delivery-infrastructure/tests). - -
## License