Smart Contracts
8 audits | 61 issues fixed | Last audited on Apr 21, 2025
Gateway
Contract for sending and receiving cross-chain messages.
Audit
Report
Date
Apr 21, 2025
Code Hash
CgrhsCZ…3sjMx4=
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
3 inherent risks:
- Users have no guarantee that the messages they send to the Gateway will reach the target smart contract on the destination chain.
- Users have no guarantee that the messages which are approved in the Gateway are the messages which were effectively created by accounts from another chain.
- The following parameters might be set to harmful values: the size of a validator set, the number of past validator sets that can approve messages, and the delay before which a new validator set can be registered.
All details are available in the report.
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
0 issue remaining (4 reported)
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
1
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
1
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
2
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
Interchain Token Service (ITS)
Contract enabling interchain token transfers through the ITS protocol.
Audit
Report
Date
Apr 21, 2025
Code Hash
nTPB9vc…RNtfGs=
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
4 inherent risks:
- Users outgoing interchain transfers might never be successfully executed on the destination blockchain and they will never be refunded on MultiversX.
- Users incoming interchain transfers might never be successfully executed on MultiversX and they might never be refunded on the source blockchain.
- Users' registration of a token from MultiversX might not be successfully executed on the destination blockchain.
- Users' registration of a token from a source blockchain might not be successfully executed on MultiversX.
All details are available in the report.
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
0 issue remaining (23 reported)
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
1
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
3
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
3
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
16
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
ITS Factory
Contract for deploying, managing and interacting with the Interchain Token Service.
Audit
Report
Date
Apr 21, 2025
Code Hash
No code hash specified
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
0 inherent risk
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
0 issue remaining (12 reported)
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
0
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
6
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
6
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
ITS Proxy
Contract for storing, executing and retrying interchain calls to smart contracts on remote shards.
Audit
Report
Date
Apr 21, 2025
Code Hash
49X2lh0…UXuxH0=
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
1 inherent risk:
- Users can’t get back the tokens from smart contract calls which are not successfully executed.
All details are available in the report.
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
0 issue remaining (3 reported)
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
1
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
1
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
1
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
Token Manager
Contract managing the tokens users bridge through the ITS protocol.
Audit
Report
Date
Apr 21, 2025
Code Hash
bNzjysu…uHSJO4=
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
0 inherent risk
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
0 issue remaining (9 reported)
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
0
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
1
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
6
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
2
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
Governance
Contract for recording and executing Axelar governance proposals related to MultiversX.
Audit
Report
Date
Apr 21, 2025
Code Hash
JmvJFSc…kiSCKQ=
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
1 inherent risk:
- The minimal time lock for proposals might be set to harmful values.
All details are available in the report.
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
0 issue remaining (6 reported)
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
0
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
1
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
5
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
0
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
Governance (2)
Contract for recording and executing Axelar governance proposals related to MultiversX.
Audit
Report
Date
Apr 21, 2025
Code Hash
JmvJFSc…kiSCKQ=
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
1 inherent risk:
- The minimal time lock for proposals might be set to harmful values.
All details are available in the report.
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
0 issue remaining (2 reported)
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
0
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
2
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
0
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
Gas Service
A contract allowing users to pay gas for cross-chain calls.
Audit
Report
Date
Apr 21, 2025
Code Hash
0a2pAnx…FgF0GE=
Inherent risks
Inherent risk: A risk for users that comes from a behavior inherent to the smart contract design.
Inherent risks only represent the risks inherent to the smart contract design, which are a subset of all the possible risks. No inherent risk doesn’t mean no risk. It only means that no risk inherent to the smart contract design has been identified. Other kind of risks could still be present. For example, the issues not fixed incur risks for the users, or the smart contracts deployed as upgradeable also incur risks for the users.
1 inherent risk:
- Users might be refunded incorrectly, or too late, or even not refunded at all for the excess of tokens they provided to cover gas costs.
All details are available in the report.
Issues
Issue: A behavior unexpected by the users or by the project, or a practice that increases the chances of unexpected behaviors to appear.
0 issue remaining (2 reported)
Severity
Reported
Remaining
Critical
An issue intolerable for the users or the project, that must be addressed.
0
0
Major
An issue undesirable for the users or the project, that we strongly recommend to address.
0
0
Medium
An issue uncomfortable for the users or the project, that we recommend to address.
0
0
Minor
An issue imperceptible for the users or the project, that we advise to address for the overall project security.
2
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.