Iskra - Audit 5

CertiKFiles named in the report

CertiK reviewed Iskra (Iskra - Audit 5) on 22 Apr 2024: 2 findings, 0 critical; 1 marked fixed, 1 acknowledged.

No open critical findings
Open the reportOpen Iskra’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings2

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High010
Medium000
Low001
HighCentralization Related RisksAcknowledged

In the contract `OFTPermit` the role `owner` has authority over the functions shown in the list below. **Inherit `OFTCore` Contract** - function `setMsgInspector()`, to set the message inspector address for the OFT. This is an optional contract that can be used to inspect both `message` and `options`. **Inherit `OAppCore` Contract** - function `setPeer()`, to set the peer address (OApp instance) for a corresponding endpoint. - function `setDelegate()`, to set the delegate address for the OApp. The delegate is capable of making OApp configurations inside of the endpoint. **Inherit `OAppPreCrimeSimulator` Contract** - function `setPreCrime()`, to set the preCrime contract address. **Inherit `OAppOptionsType3` Contract** - function `setEnforcedOptions()`, to set the enforced options for specific endpoint and message type combinations. Provides a way for the OApp to enforce things like paying for PreCrime, AND/OR minimum dst lzReceive gas amounts etc. **Inherit `Ownable` Contract** - `transferOwnership` to set the new owner for the contract. - `renounceOwnership` to set address(0) as the new owner. Any compromise to the `owner` account may allow a hacker to take advantage of this authority, set the inspector address for the OFT, set the peer address and delegate address for the OApp, and set the enforced options for specific endpoint and message type combinations.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (1)

  • contracts/layerzero/OFTPermit.sol

Part of Iskra’s security record

Iskra
Audits4 audits by 1 firmLast audit Apr 2024, by CertiK.
Critical findingsNo open critical findingsAcross 4 reports.
Open Iskra’s security record

Security firm

CertiK

1,044 projects reviewed · 1,375 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us