IonProtocol security review

Pashov Audit GroupCode version: not recorded (see the report)

Audit · firm’s term: security review

Pashov Audit Group reviewed Ion Protocol (IonProtocol security review) on 13 Jul 2024: 12 findings, 0 critical; 5 marked fixed, 7 acknowledged.

No open critical findings
Open the reportOpen Ion Protocol’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings12

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium002
Low072
LowbeforeTransfer is checked inside the bridgeAcknowledged

The report gives no description here.

Lowbridge does not check if the provided msg.value is enough for the feeAcknowledged

The report gives no description here.

LowBridge does not work if minting with native assetsAcknowledged

The report gives no description here.

LowExtra and enforced options for lzReceive gas limit not handled properlyAcknowledged

The report gives no description here.

LowNo way to revoke approval for unsupported assetsAcknowledged

The report gives no description here.

LowshareUnlockTime will impact existing sharesAcknowledged

The report gives no description here.

LowVault is incompatible with tokens exhibiting "weird" traitsAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Ion Protocol’s security record

Ion Protocol
Audits2 audits by 1 firmLast audit Jul 2024, by Pashov Audit Group.
Critical findingsNo open critical findingsAcross the 2 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
Open Ion Protocol’s security record

Security firm

Pashov Audit Group

30 projects reviewed · 53 reports · latest Jul 2026

See Pashov Audit Group’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us