Audit · firm’s term: audit report
QuillAudits reviewed Nex Labs Cross Chain (Nex Labs Stock Index) on 15 Jan 2025: 13 findings, 0 critical; 11 marked fixed, 2 open.
Report hosted on quillaudits.com.
Trustblock does not review code.
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 1 | 0 | 3 |
| Low | 1 | 0 | 8 |
These contracts implement the pausable functionality that prevents users from calling important en try points in time of emergency. In the IndexFactory, the internal functions (_pause and _unpause) of the Pausable contract were appropriately invoked and the external functions had onlyOwner modifier. However, the implementation is incomplete as the “whenNotPaused” modifier was not attached to any critical functions. This implies that in time of emergency when the admin calls the pause function, the activity of the contract does not exactly pause. Users will proceed with their activity. Though there are no external/public functions present in other contracts where the PausableUpgradable contracts were inherited, the internal functions were not even called at all. This will form the bytecode of the contracts but never to be used. The contracts are:<br>-OrderManager<br>- IndexFactoryProcessor<br>
There are some defined state variables that were never used in the smart contracts.<br>-Unused ActionInfo struct in IndexFactoryProcessor<br>-Unused orderInstanceById mapping in IndexFactoryBalancer<br>-Unused getOrderInstanceById function in IndexFactoryBalancer<br>There were also a couple of functions that had onlyFactory modifiers but none of these functions were called across other contracts<br>-setRedemptionTokenPrimaryBalance<br>-setRedemptionIndexTokenPrimaryTotalSupply<br>
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (15)
350 projects reviewed · 459 reports · latest Apr 2025
See QuillAudits’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us