LayerZero security review
Pashov Audit Group reviewed LayerZero (LayerZero security review) on 15 May 2024: 10 findings, 0 critical; 6 marked fixed, 4 acknowledged.
No open critical findings
Open the reportOpen LayerZero’s security record
Report hosted on GitHub.
Trustblock does not review code.
Findings10
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 1 | 1 |
| Low | 0 | 3 | 4 |
HighA malicious actor can prevent sending messages through the executor and ULNFixed
The report gives no description here.
MediumMissing Accounts in lz_receive_types ReturnFixed
The report gives no description here.
LowMissing Duplicate Check in required_dvns and optional_dvnsFixed
The report gives no description here.
LowMissing unique signer check in signers_setter functionFixed
The report gives no description here.
LowMissing Versioning in Solana OFT ProgramFixed
The report gives no description here.
LowPotential Impersonation of PDA Account in send Instruction of Endpoint ModuleFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of LayerZero’s security record
LayerZeroAudits21 audits by 7 firmsLast audit May 2025, by Zellic.
Critical findingsNo open critical findingsAcross the 21 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
Open LayerZero’s security recordSecurity firm
Pashov Audit Group31 projects reviewed · 55 reports · latest Jul 2026
See Pashov Audit Group’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us