Gala Games - TON Bridge

CertiKCode version: not recorded (see the report)

Audit

CertiK reviewed Gala (Gala Games - TON Bridge) on 22 Nov 2024: 15 findings, 1 critical; 14 marked fixed, 1 acknowledged.

1 critical finding, fixed
Open the reportOpen Gala’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings15

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High011
Medium002
Low0010
HighCentralization Related RisksAcknowledged

In the contracts `jetton_bridge`/`ton_coin_bridge` the role `owner_address` has authority over the functions - op::collect_fees - op::upgrade - op::change_fee Any compromise to the `owner_address` account may allow the hacker to take advantage of this authority and - extract all the fees - change the contract code to extract all the locked funds - raise the fees to get all the bridged funds In the contract `bridge_gateway` the role `owner_address` has authority over the functions - op::register - op::upgrade Any compromise to the `owner_address` account may allow the hacker to take advantage of this authority and - register a new fake bridge to perform a fake deposit and immediate extraction of all funds - change the contract code to extract all the locked funds

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Gala’s security record

Gala
Audits4 audits by 1 firmLast audit Nov 2024, by CertiK.
Critical findingsNo open critical findingsAcross the 4 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
IncidentIncident 19 May 2024Source: De.Fi incident database.
Open Gala’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us