EasyFi Network partners with cybersecurity firm Halborn for complete audit & total security
EasyFi Network has recently joined forces with Halborn Security to engage them as the official auditor & security advisor for providing a 360° & holistic security advisory for our complete protocol infrastructure on Polygon, Ethereum and Binance Smart Chain.
THE SCOPE OF HALBORN
Halborn brings deep industry experience in multiple blockchain protocols and cryptographic standards in performing extensive security audits and testing.
The EasyFi team has already started a complete security architecture audit, identify and prioritize focus areas, and then work on a weekly plan thereafter. Here is a brief of the areas of work is given below.
Full Audit
Following the security incident with EasyFi on April 19th, the easyFi team has examined the need for multiple areas of improvement and focus with respect to security practices. This includes providing a full measure of security enhancements not only for our protocol, its smart contracts and code in general, but also establish company-wide security practices, procedures and processes for all future needs for the growth of the protocol.
The Audit and Advisory scope
the scope of work of the security program with Halborn will include the following:
a. General Cybersecurity Practices — For EasyFi protocol, it is imperative that we have a process-driven security strategy and design that is built to reduce risks. So essentially we need to be suitably protected and free from cyber attacks and other related problems. So in general, what needs to be done.
find the most efficient way to protect the system, networks, software, data and information systems against any potential attacks,
implement vulnerability testing, threat analysis, and security checks & procedures,
perform research on cyber security criteria, security systems, and validation procedures,
plan and design healthy security architectures for any IT project,
investigate and provide security solutions using business standard analysis criteria
b. Holistic Infrastructure Risk Assessments — We are building security in all facets of our business. Halborn will carry auditing, advising, and validating that all technology,
people, and processes are planned and implemented securely. We will initiate some of the best practices used in this space and build them into our security processes & practices.
c. Penetration Testing — In a penetration testing environment, Halborn will perform deep security inspections to identify critical vulnerabilities before they can be exploited by adversaries and threat actors in the real world. We will simulate the activities and tactics typically performed by attackers to reduce the protocol’s exposure.
d. Smart Contract Audits & Security Testing — This is a vital process that needs to be conducted almost regularly as we continue to build and expand our protocol with new products and services. The smart contract analysis conducted by Halborn will comprise an understanding of the code structure, ensure that the code adheres to quality standards, and is free of vulnerabilities and reveals errors much in advance and before public release.
e. Establishing DevSecOps Best Practices — As we restart and begin our new growth journey, we have realized that we need to build mature processes and procedures for our DevOps as well. We will extend our global protocol security practices to our technology sphere as well. We will use Halborn’s expertise for advice on automation, infrastructure codes, cloud hosting options, and other best practices for continuous integration and continuous deployment as and when needed.