Bridge Oracle

CertiK13 Sep 2022Files named in the report

Audit

CertiK reviewed Bridge (Bridge Oracle) on 13 Sep 2022: 9 findings, 0 critical; 6 marked fixed, 3 open.

No open critical findings

Open the report Open Bridge’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings9

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	0	4
Medium	0	1
Low	3	1

LowSafeERC20 not usedOpen

For ERC20 token transfer, it is more safe to use SafeERC20 library than standard ERC20 functions. See https://github.com/OpenZeppelin/openzeppelin-contracts/blob/v4.4.2/contracts/token/ERC20/utils/SafeERC20.sol

LowUnnecessary `SafeMath` Library UsageOpen

For Solidity version 0.8.x, native math operations are already safe and cheaper. There is no need to use SafeMath library.

LowUsage of `transfer()` for sending EtherOpen

After [EIP-1884](https://eips.ethereum.org/EIPS/eip-1884) was included in the Istanbul hard fork, it is not recommended to use `.transfer()` or `.send()` for transferring ether as these functions have a hard-coded value for gas costs making them obsolete as they are forwarding a fixed amount of gas, specifically `2300`. This can cause issues in case the linked statements are meant to be able to transfer funds to other contracts instead of EOAs.