Worldcoin - security review

Nethermind Security12 Oct 2023Repository at commit 42c26ec

Audit · firm’s term: security review

Nethermind Security reviewed World (Worldcoin - security review) on 12 Oct 2023: 1 finding, 0 critical; it is marked fixed.

No open critical findings

Open the report Open World’s security record

Report stored on IPFS. Content hash bafkreigc5lykclxxy6zghoylapmc4r6vg2zsf3b6ybtm5jpgno7t3vn7wu

Trustblock does not review code.

Findings1

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	0
Low	0	0	1

Marked Best Practices or Info by the firm. Not counted as findings.

Best PracticesFloating pragmaAcknowledged

The report gives no description here.

InfoPossible duplicate roots block propagating root to L2 contractsAcknowledged

The report gives no description here.

Best PracticesAbsence of event emission during contract initializationFixed

The report gives no description here.

Best PracticesFunction deleteIdentities(...) has different access control than stated in the documentationFixed

The report gives no description here.

Best PracticesMissing input validation in some functionsFixed

The report gives no description here.

Best PracticesOutdated NatSpec documentation and comments in V2 implementationFixed

The report gives no description here.

Best PracticesUsed event marked as unused in the documentationFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (1)

https://github.com/worldcoin/world-id-contracts///src/WorldIDIdentityManager.sol at commit 42c26ecbd82fba56983addee6485d5b617960a2a

Part of World’s security record

World

Audits12 audits by 1 firmLast audit Jun 2025, by Nethermind Security.

Critical findingsNo open critical findingsAcross the 12 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.

Open World’s security record

Security firm

Nethermind Security

57 projects reviewed · 81 reports · latest Sep 2026

See Nethermind Security’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.