OFT/OApp
ChainSecurity reviewed LayerZero (OFT/OApp) on 30 Jan 2024: 8 findings, 0 critical; 4 marked fixed, 4 acknowledged.
No open critical findings
Open the reportOpen LayerZero’s security record
Report hosted on chainsecurity.com.
Trustblock does not review code.
Findings8
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 1 | 1 |
| Low | 0 | 3 | 3 |
MediumLimited Documentation and SpecificationsFixed
The report gives no description here.
LowCommented Code and Remaining ToDosFixed
The report gives no description here.
LowOFT Does Not Refund Excess FeesFixed
The report gives no description here.
LowType Check for User Provided OptionsFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (12)
- - oft/libs/OFTMsgCodec.sol
- - oapp/OAppOptionsType3.sol (libs/OAppOptionsType3.sol
- - oft/libs/OFTAdapter.sol
- - oft/libs/OFT.sol
- - oft/libs/OFTComposeMsgCodec.sol
- - oapp/OAppCore.sol
- - oapp/OApp.sol
- - oapp/OAppSender.sol
- - precrime/interfaces/IOAppPreCrimeSimulator.sol
- - oft/libs/OFTCore.sol
- - oapp/OAppReceiver.sol
- - precrime/OAppPreCrimeSimulator.sol
Part of LayerZero’s security record
LayerZeroAudits21 audits by 7 firmsLast audit May 2025, by Zellic.
Critical findingsNo open critical findingsAcross the 21 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
Open LayerZero’s security recordSecurity firm
ChainSecurity81 projects reviewed · 286 reports · latest Sep 2026
See ChainSecurity’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us