Audit Report (Verifier Network)
Paladin reviewed LayerZero (Audit Report (Verifier Network)) on 26 Aug 2023: 10 findings, 0 critical; 6 marked fixed, 4 acknowledged.
No open critical findings
Open the reportOpen LayerZero’s security record
Report stored on IPFS. Content hash QmTSxSXoK1XcVArA1MP2jggBanTryVFA5nrYtEByGhWEvm
Trustblock does not review code.
Findings10
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 4 | 5 |
MediumAdmin can re-enter during the execute function, potentially maliciously executing an operation twiceFixed
The report gives no description here.
Low_shouldCheckHash could cause certain functions to not be checked, allowing them to be executed multiple timesFixed
The report gives no description here.
Lowaddress(0) unnecessarily bears the DEFAULT_ADMIN_ROLE which has full control over this contractFixed
The report gives no description here.
LowSignatures are malleable as low-level ecrecover is usedFixed
The report gives no description here.
LowSignatures do not incorporate a domain separator by defaultFixed
The report gives no description here.
LowTypographical issuesFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of LayerZero’s security record
LayerZeroAudits21 audits by 7 firmsLast audit May 2025, by Zellic.
Critical findingsNo open critical findingsAcross the 21 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
Open LayerZero’s security recordSecurity firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us