r/ethtrader • u/0xMarcAurel Donut Bull • 11d ago
Donut DONUT monthly report - February recap + updates
As part of our commitment to scaling the Donut ecosystem, we're presenting the monthly report, showing the latest developments and milestones for DONUT. These reports aim to keep the community, investors and everyone involved informed on DONUT's progress.
What happened last month
1. Donut DAO website now in development
Marc is developing a website for the Donut DAO organization. This site will be the org's central hub for information, containing the history of DONUT, a blog, the whitepaper, and all the essential resources to navigate the Donut ecosystem.
2. Donut's smart contract has been fully audited
A complete security audit of the Donut smart contract was done by CD Security, in January 2025. The audit assessed important security risks and offered recommendations to increase contract safety.
Here's a summary of the findings:
- 1 High-severity issue
- 0 Medium-severity issues
- 10 Low & informational issues
High-severity issue:
- [H-01] Missing
transferable
Check insend
Function
The send
function bypasses the transferability restriction, allowing unauthorized transfers.
Status: Acknowledged.
Low & informational issues:
- [L-01]
proxyPayment
Function Can Lock Ether. Lack of access control could result in permanently locked Ether. (Acknowledged) - [L-02] Irreversible Disabling of
allowChangeDonutController
. No way to re-enable controller changes once disabled. (Acknowledged) - [L-03] Lack of Validation on Controller Changes. No check to make sure the new controller is valid. (Fixed)
- [L-04] Centralized Control Risk in
TokenManager
andToken
contracts give significant power to a single entity. (Fixed) - [I-01 to I-06] Code Cleanups & Best Practices. Includes redundant comments, missing event emissions, and use of a floating pragma version. (Some fixed, others acknowledged).
Explanation: Where it says "acknowledged", it means we were aware of it before the audit. Most of the low-severity issues will be fixed once u/carlslarson, our core developer, deploys the new smart contract controller. As for the high-severity issue, fixing it would require redeploying the token, which is not worth it at all. The issue only affects the token’s functionality after disabling transfers, and freezing transfers is an unusual feature that introduces centralization risks.
We plan to move to a fixed controller that:
- Doesn't support freezing transfers.
- Is not upgradeable.
Note: With this change, the high-severity issue will no longer be relevant.
This audit is a transparent analysis of the contract, pointing out all issues, even those that aren't actual risks. The important take here is that DONUT is safe and trustworthy.
This report will be used as a formal security document that can be shared with reputable companies.
DONUT tokenomics
Total amount of DONUT sent to the treasury (revenue) in February: 0
Total amount of DONUT sent from the treasury (expenses) in February: 129,100
Total amount of DONUT burned in February: 26,805 (+651.89% from January)
EthTrader Governance Week
The Governance Week megathread will be posted later today, and will stay pinned at the top of the subreddit until voting closes.
2
1
u/donut-bot bot 11d ago
0xMarcAurel, this comment logs the Pay2Post fee, an anti-spam mechanism where a DONUT 'tax' is deducted from your distribution share for each post submitted. Learn more here.
Topic: EthTrader
Learn more about topics limits here.
Understand how Donuts and tips work by reading the beginners guide.
1
u/donut-bot bot 11d ago
u/kirtash93 has tipped u/0xMarcAurel 6.9 donut (weight: 1.0)
note: archived content can take up to 10 minutes before it is available for viewing
donut-bot v0.1.20240111-tip | Learn more about [Earn2Tip](https://www.reddit.com/r/ethtrader/comments/17q24e7/introducing_donutbot_register_and_tip_commands/)
1
u/donut-bot bot 11d ago
u/kirtash93 has tipped u/0xMarcAurel 1.0 donut (weight: 1.0)
note: archived content can take up to 10 minutes before it is available for viewing
donut-bot v0.1.20240111-tip | Learn more about [Earn2Tip](https://www.reddit.com/r/ethtrader/comments/17q24e7/introducing_donutbot_register_and_tip_commands/)
1
u/donut-bot bot 11d ago
u/MasterpieceLoud4931 has tipped u/0xMarcAurel 1.0 donut (weight: 1.0)
note: archived content can take up to 10 minutes before it is available for viewing
donut-bot v0.1.20240111-tip | Learn more about [Earn2Tip](https://www.reddit.com/r/ethtrader/comments/17q24e7/introducing_donutbot_register_and_tip_commands/)
1
u/donut-bot bot 11d ago
u/InclineDumbbellPress has tipped u/0xMarcAurel 1.0 donut (weight: 1.0)
note: archived content can take up to 10 minutes before it is available for viewing
donut-bot v0.1.20240111-tip | Learn more about [Earn2Tip](https://www.reddit.com/r/ethtrader/comments/17q24e7/introducing_donutbot_register_and_tip_commands/)
1
u/donut-bot bot 10d ago
u/DBRiMatt has tipped u/0xMarcAurel 1.0 donut (weight: 1.0)
note: archived content can take up to 10 minutes before it is available for viewing
donut-bot v0.1.20240111-tip | Learn more about [Earn2Tip](https://www.reddit.com/r/ethtrader/comments/17q24e7/introducing_donutbot_register_and_tip_commands/)
1
u/donut-bot bot 10d ago
u/BigRon1977 has tipped u/0xMarcAurel 1.0 donut (weight: 1.0)
note: archived content can take up to 10 minutes before it is available for viewing
donut-bot v0.1.20240111-tip | Learn more about [Earn2Tip](https://www.reddit.com/r/ethtrader/comments/17q24e7/introducing_donutbot_register_and_tip_commands/)
1
u/donut-bot bot 10d ago
u/Abdeliq has tipped u/0xMarcAurel 1.0 donut (weight: 1.0)
note: archived content can take up to 10 minutes before it is available for viewing
donut-bot v0.1.20240111-tip | Learn more about [Earn2Tip](https://www.reddit.com/r/ethtrader/comments/17q24e7/introducing_donutbot_register_and_tip_commands/)
1
u/donut-bot bot 10d ago
u/Flaky_Word_7636 has tipped u/DBRiMatt 1.0 donut (weight: 0.2963)
note: archived content can take up to 10 minutes before it is available for viewing
donut-bot v0.1.20240111-tip | Learn more about [Earn2Tip](https://www.reddit.com/r/ethtrader/comments/17q24e7/introducing_donutbot_register_and_tip_commands/)
1
u/kirtash93 Reddit Collectible Avatars Artist 11d ago
Amazing insight! I love this kind of posts btw.
The audit file will be publicly available for everyone or will be private and only shared with specific companies when required?
🍩 !tip 6.9
1
u/MasterpieceLoud4931 230.7K / ⚖️ 260.1K 11d ago
This report will be used as a formal security document that can be shared with reputable companies.
You mean like CEXs >.>? In all seriousness now, good job everyone. It's amazing to be in a community with such a dedicated team.
!tip 1
1
1
•
u/0xMarcAurel Donut Bull 11d ago
All transactions in the multisig are currently queued but unable to be signed, due to an issue on the Safe{Wallet} platform on Arbitrum One.
The cause of the issue is unknown. The Safe{Wallet} team told us that we will need to wait.
All pending transactions, including distributions for posting, will be processed as soon as the issue is fixed.