Katana security review
Audit · firm’s term: security review
Hexens reviewed Katana (Katana security review) on 2 Feb 2026: 3 findings, 0 critical; 1 marked fixed, 2 acknowledged.
No open critical findings
Open the reportOpen Katana’s security record
Report hosted on GitHub.
Trustblock does not review code.
Findings3
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 1 |
| Low | 0 | 2 | 0 |
Marked Informational by the firm. Not counted as findings.
InformationalAdmin rescue function can withdraw KAT from the vaultAcknowledged
The report gives no description here.
InformationalDouble role check in KATVault for setting or revoking LZ_BRIDGE_ROLEFixed
The report gives no description here.
InformationalVault address not enforced in adapter initializationFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Katana’s security record
KatanaAudits1 audit by 1 firmLast audit Feb 2026, by Hexens.
Critical findingsNo open critical findingsIn 1 report.
Open Katana’s security recordSecurity firm
Hexens32 projects reviewed · 75 reports · latest Jul 2026
See Hexens’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us