Quantstamp Audits Ampleforth, a Digital-Asset-Protocol for Smart Commodity-Money

Share this article:

Quantstamp engineers recently completed an audit of Ampleforth, a digital-asset-protocol for smart commodity-money and the first IEO on Tokinex (Ethfinex/Bitfinex IEO platform). 

Founded with a mission to create fair, politically independent money, the Ampleforth protocol receives exchange-rate information from trusted oracles, and propagates that to holders of its units (Amples) by proportionally increasing or decreasing the number of tokens each individual holds. Quantstamp will serve as a trusted data feed provider for Ampleforth’s price oracle.

“Being audited by Quanstamp was important to us,” said Ampleforth CTO Brandon Iles. “They hold their clients and themselves to the highest security standards. We know that identifying any risks and vulnerabilities is critical to mitigating the risk of any future hacks.”

Commodity-monies such as gold and silver are naturally fair and independent; however, they are inadequate substitute for central-bank-money as they cannot respond efficiently to fluctuations in demand. To tackle this challenge, Ampleforth’s protocol allows its units (Amples) to avoid the deflationary problems of fixed-supply commodities without requiring a central authority. As the price of Amples fluctuates, the number of Amples a trader holds adjusts to meet the price target, stabilizing the asset.

Quantstamp’s objective was to evaluate the repository for security-related issues, code quality, and adherence to specification and best practices. The audit was conducted by three experienced security engineers from Quantstamp’s auditing team and involved architecture review, unit testing, functional testing, computer-aided verification and manual review. In the end, there were no significant security vulnerabilities found during the audit. The full report is publicly available.

Following the launch of Security Network V2, Ampleforth will be running a Quantstamp node, helping contribute to the reliability and decentralization of the network.


Back
Quantstamp Announcements

September 2026: The Approval Layer Was Exploited

Crypto lost $742.0M across 33 incidents in September 2026, almost three times August's $255.5M and the biggest month of the year so far. Bitget's $387M hack and Liquid Network's $320M exploit account for about 95% of that, with the other 31 incidents adding up to $35.0M. In August, the prices going into contracts were wrong. In September, attackers went after the systems that approve transactions in the first place. Here's the month in security 👇

Read more
about September 2026: The Approval Layer Was Exploited
Quantstamp Announcements

August 2026: The Price Feed Was Exploited

Crypto lost $255.4M across 46 incidents in August 2026, roughly level with July's $254.4M, with more incidents than any month this year. June and July incidents were largely due to key compromises, but August shifted to price manipulation. Eleven oracle and price-manipulation incidents accounted for $135.87M, or 53% of the month. Two chains stopped producing blocks and rolled back state to undo the damage. Here's the month in security 👇

Read more
about August 2026: The Price Feed Was Exploited
Quantstamp Announcements

July Security Beat: Keys Over Code (Again?)

Crypto lost more than $240 million across 29 incidents in July 2026, up roughly 216% from June's $75.87M, even as the number of attacks fell from 40 to 29. For the second month running, the damage didn't come from clever contract exploits. The same failure class ran through Web2, from a $12.3M rail-industry ransom to a 1TB bank breach that started with one employee's email. Here's the month in security 👇

Read more
about July Security Beat: Keys Over Code (Again?)