Gunzilla / Bridge
Hacken reviewed Gunzilla (Gunzilla / Bridge) on 31 Mar 2025: 25 findings, 0 critical; 7 marked fixed, 18 open.
Report hosted on hacken.io.
Trustblock does not review code.
Findings25
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 1 | 0 | 2 |
| Medium | 2 | 0 | 1 |
| Low | 15 | 0 | 4 |
HighIrreversible Token Freezing Due to blockedNonces Mechanism in Bridge ContractsOpen
The report gives no description here.
MediumUnchecked Guardian Approval Return ValueOpen
The report gives no description here.
MediumUnrestricted Withdrawal by Admin in WGUNBridge contractOpen
The report gives no description here.
LowCentralized External Guardian Controls May Lead to Lock of Token and Bridge FunctionalityOpen
The report gives no description here.
LowFloating PragmaOpen
The report gives no description here.
LowGas Limit Risk When Removing Supported Chains in WGUNBridge and GunzBridge contractsOpen
The report gives no description here.
LowHardcoded EIP-712 Name and Version in _computeDomainSeparatorOpen
The report gives no description here.
LowInconsistent and Redundant Chain Validation in Bridge ContractsOpen
The report gives no description here.
LowInconsistent Use of uint Without Explicit SizeOpen
The report gives no description here.
LowInefficient Signature Validation LogicOpen
The report gives no description here.
Show 8 more
LowLack of Validation for Zero Address and Zero Amount in Bridging FunctionsOpen
The report gives no description here.
LowMissing _disableInitializers() in Upgradable Contract ConstructorOpen
The report gives no description here.
LowMissing Non-Zero Address ValidationsOpen
The report gives no description here.
LowMissing nonReentrant Modifier in _nonblockingLzReceive FunctionOpen
The report gives no description here.
LowNo Event on Key State UpdatesOpen
The report gives no description here.
Lowpermit Function May Be Vulnerable to Signature Malleability via ecrecoverOpen
The report gives no description here.
LowsetBridgeFee Function May Cause Excessive Asset Loss Due to Missing Fee Cap and TimelockOpen
The report gives no description here.
LowUnused Custom Errors and State Variables in Bridge ContractsOpen
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (3)
- GunzBridge.sol
- WGUNBridge.sol
- WGUN.sol
Part of Gunzilla’s security record
GunzillaSecurity firm
Hacken343 projects reviewed · 476 reports · latest Sep 2026
See Hacken’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us