UniOcean: Comprehensive Security Assessment

UniOcean is a decentralized Price Forecast Platform. Going live initially on the Polygon network—with full EVM chain compatibility for planned future expansions—UniOcean allows users to forecast prices across diverse markets, including crypto, forex, precious metals, and indices (with several of these asset classes being introduced soon) utilizing secure on-chain oracles.

The UniOcean team engaged FailSafe to perform a comprehensive security assessment of their infrastructure. The assessment was split into two separate audit reports, focusing on the core smart contract architecture and the oracle integration environment.

Audit Scope and Threat Model

The security review combined structured threat modeling, focused deep-dives around high-risk functions, and rigorous adversarial verification passes. Our analysis concentrated on the integrity of the platform's data feeds, operational workflows, and state-management precision across the protocol.

Key Discoveries

During the audit process, our security engineers identified multiple findings, ranging from operational robustness improvements to architectural enhancements.

Audit Report 1: Core Platform Security

The first report details the findings related to the core smart contracts on Polygon and Arbitrum. The review uncovered 8 findings in total (1 Medium, 5 Low, 2 Informational), primarily centering around signature validation, upgradeability gaps, and gas exhaustion vectors during batch refund claims. The UniOcean team swiftly and fully resolved all 8 issues prior to deployment.

Audit Report 2: Oracle Integration

The second report covers the findings and recommendations regarding the UnioceanValuePrediction price oracle integration. The review identified a single Low-severity documentation discrepancy where the developer NatSpec documentation contradicted the underlying code requirements for recording final asset prices. This was immediately corrected to prevent unexpected transaction failures for oracle operators.

Conclusion

The UniOcean development team demonstrated an excellent commitment to security. They addressed all identified vulnerabilities across both audit scopes, effectively hardening the platform against potential logical and systemic attacks.

By engaging with external security experts, UniOcean has successfully protected its future users and ensured the stability of its Price Forecast Platform.