Reviews
18 audits | 9 best effort reviews | | 141 issues fixed | Last reviewed on Jul 5, 2026
Solana WSOL Unwrapper
Solana
Audit
A contract for incoming WSOL interchain transfers that unwraps and sends SOL to the end user.
Audit
Report
Blockchain
Solana
Date
Jul 5, 2026
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
0 inherent risk
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
2 issues reported (0 remaining).
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
0
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
0
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
2
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
EVM Native Wrapper
Ethereum
Audit
A contract for atomically wrapping native tokens and performing the outgoing interchain transfer.
Audit
Report
Blockchain
Ethereum
Date
Jul 5, 2026
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
0 inherent risk
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
1 issue reported (0 remaining).
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
0
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
1
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
0
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
EVM Native Unwrapper
Ethereum
Audit
A contract for incoming interchain transfers of the wrapped native token, that unwraps and sends the native tokens to the end user.
Audit
Report
Blockchain
Ethereum
Date
Jul 5, 2026
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
0 inherent risk
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
3 issues reported (0 remaining).
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
0
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
1
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
2
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
ampd
Axelar
Audit
Verifier’s daemon signing the validity of messages from and to Solana.
Audit
Report
Blockchain
Axelar
Date
Apr 15, 2026
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
0 inherent risk
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
7 issues reported (0 remaining).
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
4
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
0
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
3
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
ITS Solana Translator
Axelar
Audit
Contract to convert ITS payload between the formats of the Axelar Hub and of Solana ITS.
Audit
Report
Blockchain
Axelar
Date
Apr 15, 2026
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
0 inherent risk
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
0 issue reported (0 remaining).
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
0
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
0
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
0
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
Solana Chain Codec
Axelar
Audit
Contract called by Amplifier Core contracts to handle Solana-specific formatting and encoding.
Audit
Report
Blockchain
Axelar
Date
Apr 15, 2026
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
0 inherent risk
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
2 issues reported (0 remaining).
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
0
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
0
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
2
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
Solana Gas Service (3)
Solana
Audit
Program allowing users to pay gas for cross-chain calls.
Audit
Report
Blockchain
Solana
Date
Apr 15, 2026
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
1 inherent risk:
- Users might be refunded incorrectly, or too late, or even not refunded at all for the excess of tokens they provided to cover gas costs.
All details are available in the report.
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
1 issue reported (0 remaining).
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
0
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
1
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
0
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
0
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
Solana Interchain Token Service (3)
Solana
Audit
Program enabling interchain token transfers through the ITS protocol.
Audit
Report
Blockchain
Solana
Date
Apr 15, 2026
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
4 inherent risks:
- Users’ outgoing interchain transfers might never be successfully executed on the destination blockchain and they will never be refunded on Solana.
- Users’ incoming interchain transfers might never be successfully executed on Solana and they might never be refunded on the source blockchain.
- Users' registration of a token from Solana might not be successfully executed on the destination blockchain.
- Users' registration of a token from a source blockchain might not be successfully executed on Solana.
All details are available in the report.
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
3 issues reported (0 remaining).
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
0
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
1
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
0
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
2
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
Solana Operators (2)
Solana
Audit
A program to register relayers managing a Gas Service.
Audit
Report
Blockchain
Solana
Date
Apr 15, 2026
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
0 inherent risk
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
2 issues reported (0 remaining).
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
0
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
0
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
2
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
Solana Gateway (3)
Solana
Audit
Program for sending and receiving cross-chain messages.
Audit
Report
Blockchain
Solana
Date
Apr 15, 2026
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
3 inherent risks:
- Users have no guarantee that the messages they send to the Gateway will reach the target smart contract on the destination chain.
- Users have no guarantee that the messages which are approved in the Gateway are the messages which were effectively created by accounts from another chain.
- The following parameters might be set to harmful values: the number of past validator sets that can approve messages, and the delay before which a new validator set can be registered.
All details are available in the report.
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
4 issues reported (0 remaining).
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
0
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
0
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
4
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
Solana Gas Service (2)
Solana
Best Effort Review
Program allowing users to pay gas for cross-chain calls.
Best Effort Review
Report
Blockchain
Solana
Date
Oct 15, 2025
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
1 inherent risk:
- Users might be refunded incorrectly, or too late, or even not refunded at all for the excess of tokens they provided to cover gas costs.
All details are available in the report.
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
4 issues reported. Some could still be open (fix missing or not reviewed).
Severity
Reported
Critical
An issue intolerable for the users or the project, that must be addressed.
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
2
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
1
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
1
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
Solana Operators
Solana
Best Effort Review
A program to register relayers managing a Gas Service.
Best Effort Review
Report
Blockchain
Solana
Date
Oct 15, 2025
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
0 inherent risk
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
0 issue reported
Severity
Reported
Critical
An issue intolerable for the users or the project, that must be addressed.
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
Solana Interchain Token Service (2)
Solana
Best Effort Review
Program enabling interchain token transfers through the ITS protocol.
Best Effort Review
Report
Blockchain
Solana
Date
Oct 15, 2025
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
4 inherent risks:
- Users’ outgoing interchain transfers might never be successfully executed on the destination blockchain and they will never be refunded on Solana.
- Users’ incoming interchain transfers might never be successfully executed on Solana and they might never be refunded on the source blockchain.
- Users' registration of a token from Solana might not be successfully executed on the destination blockchain.
- Users' registration of a token from a source blockchain might not be successfully executed on Solana.
All details are available in the report.
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
28 issues reported. Some could still be open (fix missing or not reviewed).
Severity
Reported
Critical
An issue intolerable for the users or the project, that must be addressed.
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
3
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
5
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
20
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
Solana Gateway (2)
Solana
Best Effort Review
Program for sending and receiving cross-chain messages.
Best Effort Review
Report
Blockchain
Solana
Date
Oct 15, 2025
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
3 inherent risks:
- Users have no guarantee that the messages they send to the Gateway will reach the target smart contract on the destination chain.
- Users have no guarantee that the messages which are approved in the Gateway are the messages which were effectively created by accounts from another chain.
- The following parameters might be set to harmful values: the number of past validator sets that can approve messages, and the delay before which a new validator set can be registered.
All details are available in the report.
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
9 issues reported. Some could still be open (fix missing or not reviewed).
Severity
Reported
Critical
An issue intolerable for the users or the project, that must be addressed.
2
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
2
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
2
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
3
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
ITS Solana Translator
Axelar
Best Effort Review
Contract called by Axelar Hub to convert ITS messages from and to the Borsh encoding format, which is used on Solana by the ITS program.
Best Effort Review
Report
Blockchain
Axelar
Date
Oct 15, 2025
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
Not specified
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
4 issues reported. Some could still be open (fix missing or not reviewed).
Severity
Reported
Critical
An issue intolerable for the users or the project, that must be addressed.
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
4
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
Solana Multisig Prover
Axelar
Best Effort Review
Contract for creating proofs that verifiers signed messages being routed to Solana.
Best Effort Review
Report
Blockchain
Axelar
Date
Oct 15, 2025
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
Not specified
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
3 issues reported. Some could still be open (fix missing or not reviewed).
Severity
Reported
Critical
An issue intolerable for the users or the project, that must be addressed.
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
1
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
2
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
MultiversX Gateway
MultiversX
Audit
Contract for sending and receiving cross-chain messages.
Audit
Report
Blockchain
MultiversX
Date
Apr 21, 2025
Code Hash
CgrhsCZ…3sjMx4=
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
3 inherent risks:
- Users have no guarantee that the messages they send to the Gateway will reach the target smart contract on the destination chain.
- Users have no guarantee that the messages which are approved in the Gateway are the messages which were effectively created by accounts from another chain.
- The following parameters might be set to harmful values: the size of a validator set, the number of past validator sets that can approve messages, and the delay before which a new validator set can be registered.
All details are available in the report.
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
4 issues reported (0 remaining).
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
1
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
1
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
2
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
MultiversX Interchain Token Service (ITS)
MultiversX
Audit
Contract enabling interchain token transfers through the ITS protocol.
Audit
Report
Blockchain
MultiversX
Date
Apr 21, 2025
Code Hash
nTPB9vc…RNtfGs=
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
4 inherent risks:
- Users outgoing interchain transfers might never be successfully executed on the destination blockchain and they will never be refunded on MultiversX.
- Users incoming interchain transfers might never be successfully executed on MultiversX and they might never be refunded on the source blockchain.
- Users' registration of a token from MultiversX might not be successfully executed on the destination blockchain.
- Users' registration of a token from a source blockchain might not be successfully executed on MultiversX.
All details are available in the report.
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
23 issues reported (0 remaining).
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
1
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
3
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
3
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
16
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
MultiversX ITS Factory
MultiversX
Audit
Contract for deploying, managing and interacting with the Interchain Token Service.
Audit
Report
Blockchain
MultiversX
Date
Apr 21, 2025
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
0 inherent risk
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
12 issues reported (0 remaining).
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
0
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
6
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
6
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
MultiversX ITS Proxy
MultiversX
Audit
Contract for storing, executing and retrying interchain calls to smart contracts on remote shards.
Audit
Report
Blockchain
MultiversX
Date
Apr 21, 2025
Code Hash
49X2lh0…UXuxH0=
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
1 inherent risk:
- Users can’t get back the tokens from smart contract calls which are not successfully executed.
All details are available in the report.
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
3 issues reported (0 remaining).
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
1
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
1
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
1
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
MultiversX Token Manager
MultiversX
Audit
Contract managing the tokens users bridge through the ITS protocol.
Audit
Report
Blockchain
MultiversX
Date
Apr 21, 2025
Code Hash
bNzjysu…uHSJO4=
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
0 inherent risk
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
9 issues reported (0 remaining).
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
0
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
1
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
6
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
2
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
MultiversX Governance
MultiversX
Audit
Contract for recording and executing Axelar governance proposals related to MultiversX.
Audit
Report
Blockchain
MultiversX
Date
Apr 21, 2025
Code Hash
JmvJFSc…kiSCKQ=
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
1 inherent risk:
- The minimal time lock for proposals might be set to harmful values.
All details are available in the report.
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
6 issues reported (0 remaining).
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
0
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
1
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
5
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
0
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
MultiversX Governance (2)
MultiversX
Audit
Contract for recording and executing Axelar governance proposals related to MultiversX.
Audit
Report
Blockchain
MultiversX
Date
Apr 21, 2025
Code Hash
JmvJFSc…kiSCKQ=
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
1 inherent risk:
- The minimal time lock for proposals might be set to harmful values.
All details are available in the report.
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
2 issues reported (0 remaining).
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
0
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
2
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
0
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
MultiversX Gas Service
MultiversX
Audit
A contract allowing users to pay gas for cross-chain calls.
Audit
Report
Blockchain
MultiversX
Date
Apr 21, 2025
Code Hash
0a2pAnx…FgF0GE=
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
1 inherent risk:
- Users might be refunded incorrectly, or too late, or even not refunded at all for the excess of tokens they provided to cover gas costs.
All details are available in the report.
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
2 issues reported (0 remaining).
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
0
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
0
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
2
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
MultiversX ampd
Axelar
Best Effort Review
Verifier’s daemon signing the validity of messages from and to MultiversX.
Best Effort Review
Report
Blockchain
Axelar
Date
Feb 19, 2025
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
Not specified
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
4 issues reported. Some could still be open (fix missing or not reviewed).
Severity
Reported
Critical
An issue intolerable for the users or the project, that must be addressed.
1
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
3
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
MultiversX Multisig Prover
Axelar
Best Effort Review
Contract for creating proofs that verifiers signed messages being routed to MultiversX.
Best Effort Review
Report
Blockchain
Axelar
Date
Feb 19, 2025
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
Not specified
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
2 issues reported. Some could still be open (fix missing or not reviewed).
Severity
Reported
Critical
An issue intolerable for the users or the project, that must be addressed.
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
1
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
1
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
MultiversX Voting Verifier
Axelar
Best Effort Review
Contract for creating proofs that messages were sent from MultiversX.
Best Effort Review
Report
Blockchain
Axelar
Date
Feb 19, 2025
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
Not specified
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
1 issue reported. Some could still be open (fix missing or not reviewed).
Severity
Reported
Critical
An issue intolerable for the users or the project, that must be addressed.
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
1
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.