/audits

This repository contains a public-facing list of audits that have been performed on the Hot Cross codebase and select Hot Cross products.

Hot Cross Audits

This repository contains a public-facing list of audits that have been performed on the Hot Cross codebase and select Hot Cross products. We attempt to adhere to Semantic Versioning at all times but aren't anywhere near perfect in this regard. If multiple audits take place on the same codebase at the same time then we sometimes adjust versioning on the fly to accomodate for that.

We have thus far conducted audits with Beosin, SlowMist, Omniscia, Zokyo, CertiK, and PeckShield.

Thorough documentation of these audits can also be found here.

General Information

Canonical (and thus its EVM audits) resides on Ethereum. The Binance Smart Chain BEP20 is an ever-fluctuating supply that relies on the inflow and outflow of Cross Bridge, and 3rd-party mapped assets rely on those bridge technologies. Supply for the asset is always updated at the following API endpoint: https://api.hotcross.com/supply.


💡 Note that this is now live on mainnet at bridge.hotcross.com.


💡 TLDR: Cross Pool V1 is a "launchpool" on Binance Smart Chain and by extension a launchpool that's compatible with ETH and most EVM networks. It introduces features that we want, not only to launch $HOTCROSS to market but also to allow for other teams in the space to participate in LP staking and single-sided staking without having to reinvent the wheel on-chain as we've done.

In the first iteration of Cross Pool, which has been rigorously audited, we support: a) rewards pools with multiple LP token staking pools, b) rewards pools with single-sided staking pools, c) rewards pools with a mix of both, and d) delayed pools that reward users but only after a certain amount of time has passed. We're stoked to be launching this on mainnet in the coming days and also distributing a large portion of $HOTCROSS on it.


💡 Cross Mint is a multi-chain 721/1155 NFT minter that allows creators and hobbyists to mint our their creations on Ethereum, Polygon, Binance Smart Chain, HECO, and KCC. This is now live on mainnet and available for use at mint.hotcross.com.

Smart Contract Addresses (BSC, ETH, MATIC, HECO, KCC)

// Binance Smart Chain
{
  "crossMint721": "0x1316F7D656ea26Aa8141cb045329168b15E72186",
  "crossMint1155": "0x460f839F260E7e418dd7e4D8dEC811694a33b588"
}
// Ethereum
{
  "crossMint721": "0x096aD12B21DdF0EfdeC692532a0d1B42Fab59aEA",
  "crossMint1155": "0xC5Af3186829A38b06B8FD02c10683E9629A5Bbe7"
}
// Polygon
{
  "crossMint721": "0xd87a431067CAab669fF72ea4bCFd03A513D80bEd",
  "crossMint1155": "0x0C3d4dD9968c59302575d3D3E764c47180801057"
}
// Huobi ECO Chain
{
  "crossMint721": "0xDfb7CbE6a3e889216fFd84AA603453A1D6B40eBC",
  "crossMint1155": "0xF5E9FF9BfFeeA5d8AB13f7caE3f25e6A4083b808"
}
// KuCoin Community Chain
{
  "crossMint721": "0xe3a0c65cac05d952331cFEb87EdFE84B3799fc0B",
  "crossMint1155": "0xf912584A01797bfcE9F1029BE943458D30D170DB"
}
// Harmony
{
  "crossMint721": "0x0Ca40B486788d255607C343f7d221A08ef7e2634",
  "crossMint1155": "0x9F6870fEbe91D842f8602E2E594fa2D5C96a5637"
}

Ethereum
crossSend deployed at 0xC1B23dB9B4F47C2Ecdd49966C791D3aee664e960
feeManager deployed at 0xAa53844Cc60DC6A594E0aa64A1CFe36C3D1657f1

Binance Smart Chain
crossSend deployed at 0xe4eAf4AB33e833e9cfbD1B148d4B7E854aA292bF
feeManager deployed at 0x36FA4397ac013C73a1A26063192A6B90F7B8e160

Polygon
crossSend deployed at 0xd9ed978a5915a85d5d893A2047451FC2c6113c78
feeManager deployed at 0x84312ddd50f253B9051aE005f0026b0D28Fe03A2

Harmony
crossSend deployed at 0xe4eAf4AB33e833e9cfbD1B148d4B7E854aA292bF
feeManager deployed at 0x36FA4397ac013C73a1A26063192A6B90F7B8e160

Avalanche
crossSend deployed at 0xe4eAf4AB33e833e9cfbD1B148d4B7E854aA292bF
feeManager deployed at 0x36FA4397ac013C73a1A26063192A6B90F7B8e160

HECO
crossSend deployed at 0xe4eAf4AB33e833e9cfbD1B148d4B7E854aA292bF
feeManager deployed at 0x36FA4397ac013C73a1A26063192A6B90F7B8e160

KCC
crossSend deployed at 0xe4eAf4AB33e833e9cfbD1B148d4B7E854aA292bF
feeManager deployed at 0x36FA4397ac013C73a1A26063192A6B90F7B8e160





🔑 These smart contracts implement functions that allow users to register and modify their email information for compliant products like IHO's and Launchpads. Users only need to pay a one-time fee to the charging address when registering and will always have access to Hot Cross products that require compliance. The owner of the smart contracts can only modify the fee and the fee receiving address. These fees are secured in a Gnosis Safe (link). The current smart contract for this system is located at 0x6F2C3C4EE2D5f2c3Cd4B4fC8a305660CA34a54dc on Binance Smart Chain.