CertiK’s Smart Contract Audit of SkinChain’s SKC

CertiK | Feb 6, 2020

Article's Poster

About SkinChain

SkinChain, a blockchain platform exclusively for the cosmetic industry, aims to build an efficient product production and distribution ecosystem that can analyze integrated data and provide customized solutions. The algorithm analyzes 100 million skin types from survey and genetic data to provide an optimized product curation for each community member.

The team prides themselves on three main value propositions:

  1. Providing products that make staying young and healthy a top priority
  2. Continually pursing the fundamentals of beauty via human skin health research
  3. Maintaining user-focused operational policies and services

The team states, “SkinChain is a project in which community participants actively participate in the use, improvement, and development of products — maximizing the overall effectiveness. Skin type test results, genome scan results, and any changes after purchases are stored and managed on the blockchain-based DID.”

The Audit Process

CertiK worked closely with SkinChain to audit the design and implementation of its soon-to-be released skinchain.sol smart contract. To ensure comprehensive protection, the source code was analyzed by the proprietary CertiK formal verification engine and manually reviewed by our smart contract experts and engineers.

Formal Verification mathematically proves that code will work as intended, computing all possible scenarios. The process attempts to prove or disprove that the intended algorithms, protocols are working the way they’re supposed to be. Rather than depending on error-prone human judgment, mathematical systems can calculate against near-infinite scenarios.

By applying rigorous and complete mathematical reasoning against code, Formal Verification goes wider and deeper than any human team can.

The audit report itself is not necessarily a guarantee of correctness or trustworthiness, and we always recommend teams to seek multiple opinions, continually improve the codebase, and perform additional tests before the release.

About CertiK

CertiK leads blockchain security by pioneering the use of cutting-edge Formal Verification technology on smart contracts and blockchains. Unlike traditional security audits, Formal Verification mathematically proves program correctness and hacker-resistance. CertiK was founded by Computer Science professors of Yale University and Columbia University, securing billions in assets from many of the world’s top projects.

The research efforts of CertiK have received grants from IBM and the Ethereum Foundation, and notable investors include Binance Labs, Bitmain, Lightspeed Venture Partners, Matrix Partners, and NEO Global Capital, among others.

To request an audit/verification of your smart contracts, email audit@certik.io

Follow us on social

Twitter: https://twitter.com/certikorg

Telegram: https://t.me/certikorg

LinkedIn: https://linkedin.com/company/certik