Hyperlane / Interchain Message Service

Hacken4 Apr 2023Files named in the report

Hacken reviewed Hyperlane (Hyperlane / Interchain Message Service) on 4 Apr 2023: 21 findings, 0 critical; 10 marked fixed, 11 open.

No open critical findings

Open the report Open Hyperlane’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings21

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	1	0	3
Medium	4	0	3
Low	6	0	4

HighData InconsistencyOpen

The report gives no description here.

MediumBest PracticesOpen

The report gives no description here.

MediumCopy of well-known contractOpen

The report gives no description here.

MediumData ConsistencyOpen

The report gives no description here.

MediumUpgradeability ErrorsOpen

The report gives no description here.

LowBoolean EqualityOpen

The report gives no description here.

LowEmpty ConstructorOpen

The report gives no description here.

LowFloating PragmaOpen

The report gives no description here.

LowMisleading Require MessageOpen

The report gives no description here.

LowOutdated Solidity VersionOpen

The report gives no description here.

Show 1 more

LowUnemitted EventsOpen

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (34)

solidity/contracts/libs/MultisigIsmMetadata.sol
solidity/interfaces/IMailbox.sol
solidity/contracts/Mailbox.sol
solidity/contracts/upgrade/Versioned.sol
solidity/contracts/HyperlaneConnectionClient.sol
solidity/contracts/libs/TypeCasts.sol
solidity/contracts/middleware/liquidity-layer/LiquidityLayerRouter.sol
solidity/interfaces/IMultisigIsm.sol
solidity/interfaces/IInterchainSecurityModule.sol
solidity/interfaces/IInterchainQueryRouter.sol
solidity/contracts/middleware/liquidity-layer/interfaces/ILiquidityLayerAdapter.sol
solidity/interfaces/IMessageRecipient.sol
solidity/contracts/libs/MinimalProxy.sol
solidity/interfaces/IInterchainAccountRouter.sol
solidity/contracts/libs/EnumerableMapExtended.sol
solidity/contracts/Create2Factory.sol
solidity/interfaces/ILiquidityLayerRouter.sol
solidity/contracts/middleware/InterchainQueryRouter.sol
solidity/contracts/middleware/liquidity-layer/interfaces/circle/ICircleMessageTransmitter.sol
solidity/contracts/libs/Message.sol
solidity/contracts/upgrade/TransparentUpgradeableProxy.sol
solidity/contracts/middleware/InterchainAccountRouter.sol
solidity/contracts/OwnableMulticall.sol
solidity/contracts/middleware/liquidity-layer/interfaces/circle/ICircleBridge.sol
solidity/contracts/Router.sol
solidity/interfaces/IInterchainGasPaymaster.sol
solidity/interfaces/ILiquidityLayerMessageRecipient.sol
solidity/contracts/Call.sol
solidity/contracts/middleware/liquidity-layer/adapters/CircleBridgeAdapter.sol
solidity/contracts/PausableReentrancyGuard.sol
solidity/contracts/upgrade/ProxyAdmin.sol
solidity/contracts/InterchainGasPaymaster.sol
solidity/contracts/libs/Merkle.sol
solidity/contracts/isms/MultisigIsm.sol

Part of Hyperlane’s security record

Hyperlane

Audits3 audits by 2 firmsLast audit Sep 2025, by Cairo Security Clan.

Critical findingsNo open critical findingsAcross the 3 reports, 3 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Hyperlane’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.