Datachain - ELC for Bridge - Ethereum

QuantstampRepository at commit 7a40e6a

Audit

Quantstamp reviewed Datachain (Datachain - ELC for Bridge - Ethereum) on 8 Jan 2025: 4 findings, 0 critical; 3 marked fixed, 1 acknowledged.

No open critical findings
Open the reportOpen Datachain’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings4

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium000
Low013
LowMissing Validation for Finalized Header in Light ClientAcknowledged

The function `is_valid_light_client_finalized_header()` is missing essential validation checks for finalized headers introduced in the Deneb (EIP-4844) and Capella upgrades. These checks ensure that: - For epochs earlier than `DENEB_FORK_EPOCH`, `execution.blob_gas_used` and `execution.excess_blob_gas` are both `0`. - For epochs earlier than `CAPELLA_FORK_EPOCH`, `execution` is an empty `ExecutionPayloadHeader`, and `execution_branch` is an empty `ExecutionBranch`. These validations are specified in the [Deneb upgrade to the Sync Protocol](https://github.com/ethereum/consensus-specs/blob/dev/specs/deneb/light-client/sync-protocol.md#modified-is_valid_light_client_header). Without these validations, the function may incorrectly validate headers that are non-compliant with the protocol rules for these upgrades.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (4)

  • https://github.com/datachainlab/ethereum-elc/src/errors.rs at commit 7a40e6a73b1fc08874aa33b7fa4c07daad9141af
  • https://github.com/datachainlab/ethereum-elc/src/lib.rs at commit 7a40e6a73b1fc08874aa33b7fa4c07daad9141af
  • https://github.com/datachainlab/ethereum-elc/src/client.rs at commit 7a40e6a73b1fc08874aa33b7fa4c07daad9141af
  • https://github.com/datachainlab/ethereum-elc/src/state.rs at commit 7a40e6a73b1fc08874aa33b7fa4c07daad9141af

Part of Datachain’s security record

Datachain
Audits7 audits by 1 firmLast audit Jul 2025, by Quantstamp.
Critical findingsNo open critical findingsAcross 7 reports.
Open Datachain’s security record

Security firm

Quantstamp

236 projects reviewed · 332 reports · latest Oct 2026

See Quantstamp’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us