Sweep-n-flip Bridge
Cantina reviewed Sweep n Flip (Sweep-n-flip Bridge) on 16 Jan 2025: 36 findings, 2 critical; 14 marked fixed, 22 acknowledged.
Report hosted on cantina.xyz.
Trustblock does not review code.
Findings36
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 2 | 0 |
| High | 0 | 0 | 2 |
| Medium | 0 | 1 | 3 |
| Low | 0 | 19 | 9 |
HighInaccurate royalty calculation in WERC721::royaltyInfo functionFixed
The report gives no description here.
HighIncorrect casting in Bridge::_getRoyaltyPercentage leads to miscalculated royalty feesFixed
The report gives no description here.
Mediumdebug_forceReceiveMessage is dangerous and could be abusedFixed
The report gives no description here.
MediumImproper execution options generated in the _sendMessage functionFixed
The report gives no description here.
MediumRefundAddress forwarded to LayerZero endpoint is incorrectFixed
The report gives no description here.
LowBridge contract does not compile due to syntax errorFixed
The report gives no description here.
LowCode quality issues: replace magic numbers with constantsFixed
The report gives no description here.
LowImplement getters to read royalty information from WERC721 contractFixed
The report gives no description here.
LowIncorrect tracking of executed messages by s_messagesExecutedCount variableFixed
The report gives no description here.
LowNFT bridging from smart contract wallets will result in permanent lossFixed
The report gives no description here.
Show 4 more
LowResolve all TODOs for production readinessFixed
The report gives no description here.
LowUnnecessary system fee transfer if fee is zeroFixed
The report gives no description here.
LowUse call instead of transfer for native token transfersFixed
The report gives no description here.
LowWERC721 contract is not fully ERC2981 compliantFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Sweep n Flip’s security record
Sweep n FlipSecurity firm
Cantina37 projects reviewed · 175 reports · latest Oct 2026
See Cantina’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us