Nex Labs Stock Index

QuillAuditsFiles named in the report

Audit · firm’s term: audit report

QuillAudits reviewed Nex Labs Cross Chain (Nex Labs Stock Index) on 15 Jan 2025: 13 findings, 0 critical; 11 marked fixed, 2 open.

No open critical findings
Open the reportOpen Nex Labs Cross Chain’s security record

Report hosted on quillaudits.com.

Trustblock does not review code.

Findings13

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium103
Low108
MediumMissing whenNotPaused Modifier on critical entry pointsOpen

These contracts implement the pausable functionality that prevents users from calling important en try points in time of emergency. In the IndexFactory, the internal functions (_pause and _unpause) of the Pausable contract were appropriately invoked and the external functions had onlyOwner modifier. However, the implementation is incomplete as the “whenNotPaused” modifier was not attached to any critical functions. This implies that in time of emergency when the admin calls the pause function, the activity of the contract does not exactly pause. Users will proceed with their activity. Though there are no external/public functions present in other contracts where the PausableUpgradable contracts were inherited, the internal functions were not even called at all. This will form the bytecode of the contracts but never to be used. The contracts are:<br>-OrderManager<br>- IndexFactoryProcessor<br>

LowUnused state variables and functionsOpen

There are some defined state variables that were never used in the smart contracts.<br>-Unused ActionInfo struct in IndexFactoryProcessor<br>-Unused orderInstanceById mapping in IndexFactoryBalancer<br>-Unused getOrderInstanceById function in IndexFactoryBalancer<br>There were also a couple of functions that had onlyFactory modifiers but none of these functions were called across other contracts<br>-setRedemptionTokenPrimaryBalance<br>-setRedemptionIndexTokenPrimaryTotalSupply<br>

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (15)

  • factory/IndexFactoryStorage.sol
  • chainlink/ConfirmedOwner.sol
  • IndexFactory.sol
  • proposable/ProposableOwnableUpgradeable.sol
  • chainlink/FunctionsClient.sol
  • vault/NexVault.sol
  • factory/IndexFactoryBalancer.sol
  • factory/OrderManager.sol
  • IndexfactoryStorage.sol
  • chainlink/ConfirmedOwnerWithProposal.sol
  • proposable/ProposableOwnable.sol
  • factory/IndexFactoryProcessor.sol
  • factory/IndexFactory.sol
  • token/IndexToken.sol
  • coa/ContractOwnedAccounts.sol

Part of Nex Labs Cross Chain’s security record

Nex Labs Cross Chain
Audits3 audits by 1 firmLast audit Jan 2025, by QuillAudits.
Critical findingsNo open critical findingsAcross 3 reports.
Open Nex Labs Cross Chain’s security record

Security firm

QuillAudits

350 projects reviewed · 459 reports · latest Apr 2025

See QuillAudits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us