Spark ALM CCTP & Swap Logic Audit

Cantina25 Sep 2024Code version: not recorded (see the report)

Cantina reviewed Spark (Spark ALM CCTP & Swap Logic Audit) on 25 Sep 2024: 1 finding, 0 critical; it is marked fixed.

No open critical findings

Open the report Open Spark’s security record

Report hosted on cantina.xyz.

Trustblock does not review code.

Findings1

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	0
Low	0	0	1

Marked Informational by the firm. Not counted as findings.

InformationalThe mintRecipient is already checked in the TokenMessengerAcknowledged

The report gives no description here.

InformationalImproved commentsFixed

The report gives no description here.

InformationalMissing comment about counterintuitive quote amount in swapFixed

The report gives no description here.

InformationalThe doCall forwarding the callvalue is counterintuitiveFixed

The report gives no description here.

InformationalThe psm.to18ConversionFactor() call can be cachedFixed

The report gives no description here.

InformationalUnused variables and missing check within ForeignControllerFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Spark’s security record

Spark

Audits32 audits by 2 firmsLast audit Aug 2026, by Cantina.

Critical findingsNo open critical findingsAcross 32 reports.

Open Spark’s security record

Security firm

Cantina

37 projects reviewed · 175 reports · latest Oct 2026

See Cantina’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.