Aerobloc

We express our gratitude to the Aerobloc team for the collaborative engagement that enabled the execution of this Smart Contract Security Assessment.

Aerobloc introduces a decentralized, protocol-based ecosystem tailored for the aviation industry, leveraging blockchain technology to securely share transaction data and implement publicly verifiable logic.

The system users should acknowledge all the risks summed up in the risks section of the report

Documentation quality

• Functional requirements are limited.

• • Project overview is detailed.

  • All roles in the system are described.

  • Use cases are described and detailed.

  • For each contract all features are described.

• Technical description is limited.

• • Run instructions are not provided.

  • Technical specification is provided.

  • The NatSpec documentation is sufficient.

Code quality

• The development environment is configured.

• Solidity Style Guide violations.

• A few variable names contain typos: StakingV2::lockUpRewardEnddTime and StakingV2::lockUpDiscountEnddTime in the StakerInfo struct.

• Presence of redundant code in certain functions (e.g., else if used after a previous condition has been validated in the StakingV2::postReward() as well as an unused input parameter in the StakingV2::notLockedUpReward()).

Test coverage

Code coverage of the project is 90.95% (branch coverage).

• Deployment and basic user interactions are covered by tests.

• Negative case coverage is present.

• Interactions involving multiple users are tested thoroughly.

• Not all branches are covered by tests.

Aerobloc introduces a decentralized, protocol-based ecosystem tailored for the aviation industry, leveraging blockchain technology to securely share transaction data and implement publicly verifiable logic. It fosters collaboration by allowing industry stakeholders to design, test, and launch distributed applications that can be reused by others within the ecosystem. Aerobloc is governed by its community stakeholders, transitioning from an executive team-managed model to a fully decentralized structure. It provides a decentralized ledger for stakeholders to share data, reduce costs, and increase revenue, with incentives for data contribution.

At the heart of the Aerobloc ecosystem is the $AERRO Token, the world's first RWApp token for aviation. The $AERRO is an ERC-20 token that powers the RWApps on Aerobloc, allowing stakeholders to share in the value generated by the ecosystem. The token accrues value primarily through staking mechanisms and fee sharing. Users can stake $AERRO to earn rewards, gain governance privileges, and receive fee rebates, creating an incentive structure that encourages active participation and early adoption.

The files in the scope:

• Token.sol: Implements the $AERRO ERC20 token with an initial supply minted to the owner. The contract includes a burning mechanism that reduces the token supply, helping manage inflation and enhance token value. The daoAddress can trigger the burn functionality, ensuring that supply adjustments are controlled and governed by the DAO.

• Dao.sol: The core governance contract of Aerobloc, responsible for managing proposals related to administrative changes, fee splits, and external transfers. It governs the platform through community proposals and voting, involving stakeholders in decision-making processes. It also manages fee distribution, ensuring that collected fees are split between burning, rewarding stakers, and contributing to the DAO treasury.

• LandingCharges.sol: Manages landing charges within the Aerobloc ecosystem. This contract allows only admin addresses to create or update charges.

• StakingV2.sol: This contract handles the staking of $AERRO tokens. Stakeholders can stake $AERRO tokens to earn rewards that are periodically distributed based on their stake size and duration.

Privileged roles

Token.sol:

• owner: The initial supply of $AERRO tokens is minted to the contract deployer, who is also the owner. The owner can update the DAO address.

• daoAddress: Has the privilege to burn tokens, a critical function in managing token supply and value.

Dao.sol:

• admins: Authorized to create and action proposals, manage the list of admins, adjust fee splits, and approve external transfers.

LandingCharges.sol:

• onlyAdmins: Only designated admin addresses can create or update landing charges and manage the DAO address.

StakingV2.sol:

• owner: Can update the DAO address and manage contract ownership.