Flow Blockchain Ecosystem Security Problems Tested By Quantstamp | Different Scaling From Etherium With Layer 1 Without sharding.  

2 min read

Quanstamp recently run several security tests on the flow blockchain ecosystem. Quantstamp has audited Flow’s core smart contracts, and also Ethereum smart contracts that manage the teleportation of USDT between Ethereum and BloctoSwap, a decentralized exchange that runs on Flow. Quantstamp also intends to conduct a full audit of Cadence, Flow’s smart contract language in the near future.  

About Quanstamp

Quantstamp’s mission is to secure the decentralized internet and has protected over $100B in digital asset risk from hackers. More than 200 startups, foundations, and enterprises work with Quantstamp to keep their innovative products safe.

Quantsamp has worked on some of the most popular blockchains which include Cardano, SuperRare, Avalanche and Ethereum 2.0

The Flow blockchain was originally created by Dapper Labs, the creators of CryptoKitties and NBA Top Shot, and is designed to optimize the user experience for entertainment, social, and gaming applications. In order to optimize for these applications, Dapper Labs is taking a different approach to scaling compared to Ethereum. While Ethereum and Ethereum applications are seeking to scale via sharding and layer 2 solutions, the Flow blockchain separates the validator / miner role into 4 separate roles in an effort to scale directly on Layer 1 without sharding.  

Flow has a unique consensus process. image source

Cadence, Flow’s Resource-Oriented Programming Language

Dapper Labs is also the original creator of Cadence, the resource-oriented programming language for smart contract development on Flow. Cadence is designed to be intuitive for developers, optimizes for the protection of digital assets, and is similar in many ways to Move, Libra’s programming language.  

“Resource-oriented programming, a new paradigm that pairs linear types with object capabilities to create a secure and declarative model for digital ownership by ensuring that resources (and their associated assets) can only exist in one location at a time, cannot be copied, and cannot be accidentally lost or deleted” – Cadence documentation

In addition to our other security work, Quantstamp also audits and reviews smart contract languages. Quantstamp recently completed a security review of Cadence. This security engagement included:

  • reviewing tools that help convert human readable code into a machine-usable representation, such as the parser and checker
  • reviewing the interpreter, the program that executes Cadence code and updates the state of the Flow blockchain
  • analyzing design choices for the language

Quantstamp intends to conduct a full security audit in the near future.

Flow’s Core Smart Contract

Quantstamp has audited the core smart contracts of the Flow blockchain. These contracts manage:

  • the operation of the FLOW token, the Flow blockchains native token
  • transaction fees
  • storage fees
  • new account setup
  • administrative roles
  • staking by node operators AND
  • unlocking vested Flow tokens from the token sale


BloctoSwap is the first decentralized exchange (DEX) on Flow. BloctoSwap launched on March 17th, 2021. BloctoSwap listed FLOW (the FLOW blockchain’s native token) and tUSDT (Tether), and listed the FLOW/tUSDT pair.

Quantstamp also recently audited Ethereum smart contracts that are responsible for teleporting USDT to and from Ethereum and BloctoSwap, a decentralized exchange (DEX) similar to Uniswap that operates on Flow. BloctoSwap will be the first place for users to purchase FUSD, with the USDT teleported to Flow from Ethereum, through contracts audited by Quantstamp.

BloctoSwap was created by portto, a company specializing in user friendly experiences for blockchain-enabled use cases. This was Quantstamp’s first audit of a DeFi application on Flow.

NBA Top Shot

According to CryptoSlam!, NBA Top Shot is leading in all-time sales for NFTs.

Successful applications are already running on Flow. NBA Top Shot, a marketplace for collectible NBA highlights that is officially licensed by the NBA, has already achieved over $300 million in sales and over 250K active users in less than 6 months. NBA Top Shots collectible moments are stored as NFTs on Flow. A similar marketplace is in the works for UFC digital collectibles.  

NFTs in the Mainstream Spotlight

Ranging from artwork to digital collectibles and in-game assets, NFTs are in the spotlight and are actively pushing blockchain technology mainstream. These collectibles are helping communities grow and flourish by creating value, enhancing authentic engagement, and unlocking unprecedented opportunities for creators.

Dapper Labs and portto are contributing to digital communities by focusing on user experience in the Flow blockchain ecosystem. Their commitment to user experience is reflected in the design choices they made for the Flow blockchain and applications. We look forward to hearing about future achievements from NBA Top Shot and the success of future projects from Dapper Labs.  

Quantstamp is pleased to secure the assets in your digital nation and work with projects that are pushing the industry forward while putting their users first.

Original Post HERE