Datachain - ELC for Bridge (OptimismELC)
Summary
The current audit concerns a light client for the Optimism L2. The code maintains a generally clear separation of concerns between L2 state derivation logic and core light client operations. In its current state, it is incomplete, as it misses essential functionality (i.e. misbehaviour handling). However, the remaining business logic was audited for security. The light client was audited with reference to the [OP Stack Specification](https://specs.optimism.io/). Overall, no high-severity vulnerabilities were found. However, a few low- and info-severity issues were found, and we recommend addressing them to enhance the robustness of the client. The documentation available was relatively thorough. However, we do recommend further fleshing out the code comments, in particular taking care to create `rustdoc`. The test suite could be substantially improved by enhancing the overall coverage. **Update**: All the issues and suggestions identified as part of the initial report have been addressed. Moreover, we have reviewed the misbehaviour logic included in response to DAT-8. One new suggestion has been included as a result of the review, and this has also been resolved.
Issues (8)
Low | Medium | High | Critical | Total | |
|---|---|---|---|---|---|
Not fixed | - | - | - | - | 0 |
Acknowledged | - | - | - | - | 0 |
Fixed | 8 | - | - | - | 8 |
| Total | 8 | 0 | 0 | 0 | 8 |