Hyperlane / Interchain Message Service

Hacken4 Apr 2023Files named in the report

Hacken reviewed Hyperlane (Hyperlane / Interchain Message Service) on 4 Apr 2023: 21 findings, 0 critical; 10 marked fixed, 11 open.

No open critical findings

Open the report Open Hyperlane’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings21

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	1	0	3
Medium	4	0	3
Low	6	0	4

HighCompilation ErrorFixed

The report gives no description here.

HighUpgradeability ErrorsFixed

The report gives no description here.

HighUpgradeability ErrorsFixed

The report gives no description here.

MediumBest Practice ViolationFixed

The report gives no description here.

MediumMissing SafeERC20Fixed

The report gives no description here.

MediumUnfinalized codeFixed

The report gives no description here.

LowFunction VisibilityFixed

The report gives no description here.

LowInefficient Gas ModelFixed

The report gives no description here.

LowMissing zero address validationFixed

The report gives no description here.

LowStyle Guide ViolationFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (34)

solidity/contracts/libs/MultisigIsmMetadata.sol
solidity/interfaces/IMailbox.sol
solidity/contracts/Mailbox.sol
solidity/contracts/upgrade/Versioned.sol
solidity/contracts/HyperlaneConnectionClient.sol
solidity/contracts/libs/TypeCasts.sol
solidity/contracts/middleware/liquidity-layer/LiquidityLayerRouter.sol
solidity/interfaces/IMultisigIsm.sol
solidity/interfaces/IInterchainSecurityModule.sol
solidity/interfaces/IInterchainQueryRouter.sol
solidity/contracts/middleware/liquidity-layer/interfaces/ILiquidityLayerAdapter.sol
solidity/interfaces/IMessageRecipient.sol
solidity/contracts/libs/MinimalProxy.sol
solidity/interfaces/IInterchainAccountRouter.sol
solidity/contracts/libs/EnumerableMapExtended.sol
solidity/contracts/Create2Factory.sol
solidity/interfaces/ILiquidityLayerRouter.sol
solidity/contracts/middleware/InterchainQueryRouter.sol
solidity/contracts/middleware/liquidity-layer/interfaces/circle/ICircleMessageTransmitter.sol
solidity/contracts/libs/Message.sol
solidity/contracts/upgrade/TransparentUpgradeableProxy.sol
solidity/contracts/middleware/InterchainAccountRouter.sol
solidity/contracts/OwnableMulticall.sol
solidity/contracts/middleware/liquidity-layer/interfaces/circle/ICircleBridge.sol
solidity/contracts/Router.sol
solidity/interfaces/IInterchainGasPaymaster.sol
solidity/interfaces/ILiquidityLayerMessageRecipient.sol
solidity/contracts/Call.sol
solidity/contracts/middleware/liquidity-layer/adapters/CircleBridgeAdapter.sol
solidity/contracts/PausableReentrancyGuard.sol
solidity/contracts/upgrade/ProxyAdmin.sol
solidity/contracts/InterchainGasPaymaster.sol
solidity/contracts/libs/Merkle.sol
solidity/contracts/isms/MultisigIsm.sol

Part of Hyperlane’s security record

Hyperlane

Audits3 audits by 2 firmsLast audit Sep 2025, by Cairo Security Clan.

Critical findingsNo open critical findingsAcross the 3 reports, 3 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Hyperlane’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.