AFX Bridge security assessment

ZellicCode version: not recorded (see the report)

Audit · firm’s term: security assessment

Zellic reviewed AFX Bridge (AFX Bridge security assessment) on 5 May 2026: 10 findings, 2 critical; 3 marked fixed, 6 acknowledged, 1 open.

2 critical findings, fixed
Open the reportOpen AFX Bridge’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings11

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical002
High031
Medium130
Low000
HighBridge-address updates can strand pending transfersAcknowledged

The report gives no description here.

HighPartially voted withdrawals can stay stuck in the pending state indefinitelyAcknowledged

The report gives no description here.

HighValidator rotation can double-count bridge votesAcknowledged

The report gives no description here.

MediumAttacker can deposit a victim's preapproved USDC to the Cosmos chain without consentAcknowledged

The report gives no description here.

MediumMultiple issues related to the Bridge contract address update functionalityAcknowledged

The report gives no description here.

MediumOrchestrator is not aware of pausable functionality on ArbitrumAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of AFX Bridge’s security record

AFX Bridge
Audits1 audit by 1 firmLast audit May 2026, by Zellic.
Critical findingsNo open critical findingsIn that report, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
Open AFX Bridge’s security record

Security firm

Zellic

62 projects reviewed · 77 reports · latest Aug 2026

See Zellic’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us