Security Audit Report: Reentrancy & Access Control Review: Bitget

Bitget's DeFi infrastructure, with a Total Value Locked (TVL) of approximately $6.8 billion, utilizes a proxy-based upgradeability pattern along with off-chain order matching. During a security audit, four critical weaknesses were identified that could allow malicious actors to steal user funds, escalate privileges, bypass rate limits, and manipulate governance parameters.

The most significant issue is a reentrancy vulnerability in the Vault contract's withdraw() function, which can be exploited by deploying a malicious contract that re-enters the withdraw() function before reducing the user's balance. This can lead to a full drain of user balances, potentially amounting to the entire contract's value. Additionally, there is no ReentrancyGuard or nonReentrant modifier present to mitigate this weakness.

Other identified issues include improper access control on the ProxyAdmin contract's upgrade() function on the Layer 2 (L2) deployment, allowing potential admin takeover through governance exploits. There is also a lack of rate-limit checks on the Router contract's swap() function, enabling repeated re-entrancy calls that could drain liquidity pools. Finally, an uninitialized storage slot in the upgradeable Vault contract allows for privilege escalation and contract pausing if exploited.

Overall, the risk score for the current Bitget deployment is 7.4 out of 10, indicating a high risk level. The audit provides a prioritized remediation plan, which includes implementing ReentrancyGuard across all contracts, enforcing access controls on the ProxyAdmin contract, adding rate-limits to the Router swap() function, and ensuring proper initialization of storage slots during contract upgrades.