Quantstamp Audits ICHI's oneToken Repository

March 1, 2024
Quantstamp Announcements

Quantstamp completed an audit of the ichi-oneToken repository that corresponds to the ICHI protocol. We audited the repository at the 09fca74 commit for the initial report and the 11c210e commit for the final report. The ichi-oneToken repository contains contracts that govern the deployment of oneToken instances. Click here to view the public audit report.

Resolved means that an audit finding was either fixed or mitigated. Acknowledged means that an audit finding was left as is. Clients often provide their reasoning for acknowledged items within the audit report.

ICHI’s Decentralized Monetary Authority

The ICHI protocol enables cryptocurrency communities to create and govern their own stablecoin through a Decentralized Monetary Authority (DMA). Community stablecoins created through ICHI are called oneTokens. oneTokens are pegged to 1 USD and minted by depositing a combination of stablecoins (like USDC) along with the oneToken’s member coin. For instance, to mint a oneWBTC token (an instance of a oneToken), users need to deposit USDC and WBTC.

A list of oneTokens approved by ICHI governance.

Stablecoins are governed by the communities that created them through a DAO-like governance model called the Decentralized Monetary Authority (DMA). Governance is managed by the oneToken holders. In the oneWBTC token holder community, each oneWBTC token gives the holder 1 vote during governance decisions, which may include how the Treasury and Collateral Reserve are managed.

When a oneToken like oneWBTC is minted using USDC and WBTC, WBTC tokens are stored in a Community Treasury. oneWBTC token holders can choose to use treasury funds however they would like. For instance, they may decide to use the treasury to earn yield in DeFi or offer a grant to individuals or organizations that further the development of the oneToken ecosystem.

The USDC used to mint a oneToken instance is stored in a Collateral Reserve; should oneToken holders decide to redeem their tokens for USDC, it is withdrawn from this reserve. Governance is also in charge of managing the Collateral Reserve, which may include choosing to earn yield with the Collateral Reserve in DeFi.

ICHI Governance of oneToken Ecosystem

While each oneToken community governs their own stablecoin, ICHI token holders are in charge of the governance of the larger ecosystem. ICHI governance is needed to approve the deployment of new oneTokens along with governing the overarching parameters for oneToken instances that include things such as:

Future Plans

ICHI plans to launch stablecoins for dozens of other projects in the coming months.

Increasing Access to Finance

ICHI has not only created an innovative DeFi product that enhances access to stablecoin issuance, they have also taken the safety of their users seriously by choosing Quantstamp as their security provider for the ichi-oneToken repository. Quantstamp looks forward to continuing to secure the assets in your digital nation and working with future projects that also intend to increase access to the financial infrastructure of tomorrow.

Quantstamp Announcements
June 11, 2021

Quantstamp completed an audit of the ichi-oneToken repository that corresponds to the ICHI protocol. We audited the repository at the 09fca74 commit for the initial report and the 11c210e commit for the final report. The ichi-oneToken repository contains contracts that govern the deployment of oneToken instances. Click here to view the public audit report.

Resolved means that an audit finding was either fixed or mitigated. Acknowledged means that an audit finding was left as is. Clients often provide their reasoning for acknowledged items within the audit report.

ICHI’s Decentralized Monetary Authority

The ICHI protocol enables cryptocurrency communities to create and govern their own stablecoin through a Decentralized Monetary Authority (DMA). Community stablecoins created through ICHI are called oneTokens. oneTokens are pegged to 1 USD and minted by depositing a combination of stablecoins (like USDC) along with the oneToken’s member coin. For instance, to mint a oneWBTC token (an instance of a oneToken), users need to deposit USDC and WBTC.

A list of oneTokens approved by ICHI governance.

Stablecoins are governed by the communities that created them through a DAO-like governance model called the Decentralized Monetary Authority (DMA). Governance is managed by the oneToken holders. In the oneWBTC token holder community, each oneWBTC token gives the holder 1 vote during governance decisions, which may include how the Treasury and Collateral Reserve are managed.

When a oneToken like oneWBTC is minted using USDC and WBTC, WBTC tokens are stored in a Community Treasury. oneWBTC token holders can choose to use treasury funds however they would like. For instance, they may decide to use the treasury to earn yield in DeFi or offer a grant to individuals or organizations that further the development of the oneToken ecosystem.

The USDC used to mint a oneToken instance is stored in a Collateral Reserve; should oneToken holders decide to redeem their tokens for USDC, it is withdrawn from this reserve. Governance is also in charge of managing the Collateral Reserve, which may include choosing to earn yield with the Collateral Reserve in DeFi.

ICHI Governance of oneToken Ecosystem

While each oneToken community governs their own stablecoin, ICHI token holders are in charge of the governance of the larger ecosystem. ICHI governance is needed to approve the deployment of new oneTokens along with governing the overarching parameters for oneToken instances that include things such as:

Future Plans

ICHI plans to launch stablecoins for dozens of other projects in the coming months.

Increasing Access to Finance

ICHI has not only created an innovative DeFi product that enhances access to stablecoin issuance, they have also taken the safety of their users seriously by choosing Quantstamp as their security provider for the ichi-oneToken repository. Quantstamp looks forward to continuing to secure the assets in your digital nation and working with future projects that also intend to increase access to the financial infrastructure of tomorrow.

Keep up with Quantstamp and the latest industry trends 🛡
Sign up to our newsletter 📬
Keep up with Quantstamp and the latest industry trends 🛡
Sign up to our newsletter 📬
Quantstamp Announcements

Modular Account: How Audits Can Help Shape Standards And Catalyze Mass Adoption

Quantstamp recently conducted a smart contract audit for Alchemy’s Modular Account, a wallet implementation designed from the ground up for ERC-4337 and ERC-6900 compatibility including two plugins

Read more
Quantstamp Announcements

Quantstamp 2023 Web3 Security Year In Review

As the year comes to a close, we wanted to take a moment to reflect on this year’s biggest hacks, root causes, and noteworthy trends.

Read more