Securitize Bridge ACL Ext Audit Report
Cyfrin reviewed Securitize (Securitize Bridge ACL Ext Audit Report) on 30 Jul 2026: 4 findings, 0 critical; 3 marked fixed, 1 acknowledged.
No open critical findings
Open the reportOpen Securitize’s security record
Report hosted on GitHub.
Trustblock does not review code.
Findings4
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 1 | 3 |
LowInvestorRegistry::load skips the Anchor discriminator check before Borsh-deserializing the whitelist account bodyFixed
The report gives no description here.
Lowsecuritize_bridge::initialize applies no validation to the SPL acl_program_id, permanently bricking an instance from a zero or garbage valueFixed
The report gives no description here.
Lowsend_usdc_cross_chain_deposit unconditionally reimburses the executor fee from the protocol config PDA with an unconstrained payer and executor_payeeFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Securitize’s security record
SecuritizeAudits37 audits by 2 firmsLast audit Sep 2026, by Cyfrin.
Critical findingsNo open critical findingsAcross the 37 reports, 6 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Securitize’s security recordSecurity firm
Cyfrin28 projects reviewed · 79 reports · latest Sep 2026
See Cyfrin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us