Linea Bridge Audit

OpenZeppelinFiles named in the report

Audit · firm’s term: audit

OpenZeppelin reviewed Linea (Linea Bridge Audit) on 3 Nov 2023: 14 findings, 1 critical; 10 marked fixed, 4 open.

1 critical finding, fixed
Open the reportOpen Linea’s security record

Report hosted on blog.openzeppelin.com.

Trustblock does not review code.

Findings14

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High201
Medium001
Low207
CriticalToken Bridge Reentrancy Can Corrupt Token AccountingFixed

None

HighTokens Sharing an Address on L1 and L2 Can Be Set Up to Steal User FundsFixed

None

MediumTokens Sharing an Address Across L1 and L2 Can Prevent Users From BridgingFixed

None

LowBridge Tokens Default to 18 DecimalsFixed

None

LowError-Prone and Inconsistent Definition of Gap VariablesFixed

None

LowFunctions Lack PausabilityFixed

None

LowFunds Can Be Locked in the BridgeFixed

None

LowIncorrect Parent Initializer in BridgedTokenFixed

None

LowPragma Compiler Version Default Can Generate Incompatible OpcodesFixed

None

LowValidators Can Steal Refunds of EOA Users When Claiming MessagesFixed

None

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (23)

  • L1MessageManager.sol
  • L2MessageService.sol
  • TimeLock.sol
  • L1MessageService.sol
  • IMessageService.sol
  • TransactionDecoder.sol
  • TokenBridge.sol
  • L2MessageManager.sol
  • IL2MessageManager.sol
  • MessageServiceBase.sol
  • BridgedToken.sol
  • IZkEvmV2.sol
  • Rlp.sol
  • IL1MessageManager.sol
  • ITokenBridge.sol
  • ZkEvmV2Init.sol
  • IGenericErrors.sol
  • RateLimiter.sol
  • ZkEvmV2.sol
  • PauseManager.sol
  • IPauseManager.sol
  • IRateLimiter.sol
  • Codec.sol

Part of Linea’s security record

Linea
Audits2 audits by 1 firmLast audit Dec 2023, by OpenZeppelin.
Critical findingsNo open critical findingsAcross the 2 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Linea’s security record

Security firm

OpenZeppelin

67 projects reviewed · 184 reports · latest Aug 2026

See OpenZeppelin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us