Mantle Network (Bridge Contracts)

QuantstampRepository at commit d627d24

Audit

Quantstamp reviewed Mantle Network (Mantle Network (Bridge Contracts)) on 13 Jul 2023: 5 findings, 0 critical; 1 marked fixed, 4 acknowledged.

No open critical findings
Open the reportOpen Mantle Network’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings5

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High010
Medium010
Low021
LowMissing Input ValidationFixed

It is important to validate input data even if they come from trusted sources to reduce human error: 1. `L1StandardBridge.initialize()` needs to validate `_l2TokenBridge` and `_l1BitAddress` against `address(0)` as well since there is no setter for them. 2. `L2StandardBridge.constructor()` needs to validate `_l2CrossDomainMessenger` and `_l1TokenBridge` against `address(0)` as well since there is no setter for them.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (2)

  • https://github.com/mantlenetworkio/mantle/packages/contracts/contracts/L2/messaging/L2StandardBridge.sol at commit d627d242fe19f50f344f1ff4b27532d1757303a6
  • https://github.com/mantlenetworkio/mantle/packages/contracts/contracts/L1/messaging/L1StandardBridge.sol at commit d627d242fe19f50f344f1ff4b27532d1757303a6

Part of Mantle Network’s security record

Mantle Network
Audits9 audits by 4 firmsLast audit May 2025, by MixBytes.
Critical findingsNo open critical findingsAcross the 9 reports, 5 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Mantle Network’s security record

Security firm

Quantstamp

236 projects reviewed · 332 reports · latest Oct 2026

See Quantstamp’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us