[SCA] Push Chain / SVM Gateway

Multi-Chain

Audited on 2026/04/24

No open critical findings

Summary

Push Chain is a Solana-side bridge gateway that locks user deposits in a PDA-controlled vault and releases them via TSS-signed outbound operations (withdraw, execute, revert, rescue), enabling bidirectional asset and payload bridging between Solana and Push Chain.

Project

Push Chain

Multi-Chain

No open critical findings

Last audited on 2026/08/04

by Hacken

Auditor

Hacken

Multi-Chain

2.8bn TVL of audited projects

488 audits on Trustblock

Multi-Tags

Issues (20)

	Low	Medium	High	Critical	Total
Not fixed	1	1	-	-	2
Acknowledged	1	1	-	-	2
Fixed	11	5	-	-	16
Total	13	7	0	0	20

Contracts (17)

#	File Name
11	encoding.rs
12	withdraw.rs
13	initialize.rs
14	mod.rs
15	rate_limit.rs
16	execute.rs
17	tss.rs

#	File Name
11	encoding.rs
12	withdraw.rs
13	initialize.rs
14	mod.rs
15	rate_limit.rs
16	execute.rs
17	tss.rs

[SCA] Push Chain / SVM Gateway

Summary

Issues (20)

Wrong Gas Fee Reimbursement Source In finalize_universal_tx Breaks The 1:1 Backing Invariantnot_fixed/medium

Unbounded Protocol Feenot_fixed/low

Missing Per-Slot USD Cap in FUNDS Route Leads To Uncontrolled Deposit ThroughputAcknowledgedacknowledged/medium

Misleading Function and Parameter Naming in Instant Route HandlerAcknowledgedacknowledged/low

Contracts (17)