Taiko Protocol Audit

OpenZeppelin26 Jun 2024Files named in the report

Audit · firm’s term: audit

OpenZeppelin reviewed Taiko (Taiko Protocol Audit) on 26 Jun 2024: 37 findings, 2 critical; 31 marked fixed, 3 acknowledged, 3 open.

2 critical findings, fixed

Open the report Open Taiko’s security record

Report hosted on blog.openzeppelin.com.

Trustblock does not review code.

Findings37

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	2
High	1	0	2
Medium	0	1	8
Low	2	2	19

CriticalBridge Signals Can Be Forged to Drain the Protocol - Phase 3Fixed

The report gives no description here.

CriticalVulnerability in Block Proposal Function Allows Token Theft - Phase 1Fixed

The report gives no description here.

HighBlock Submission Susceptible to DOS - Phase 1Fixed

The report gives no description here.

HighInitialization Script of TaikoL2 Allows Reinitialization of the Rollup - Phase 1Fixed

The report gives no description here.

MediumCross-Chain Owner Cannot Call Privileged Functions - Phase 2Fixed

The report gives no description here.

MediumDesign Flaw in Bridge Contract Suspension Mechanism - Phase 1Fixed

The report gives no description here.

MediumGovernor Proposal Creation Is Vulnerable to Front Running in OpenZeppelin Contracts - Phase 1Fixed

The report gives no description here.

MediumIncomplete Role Renunciation in TaikoTimelockController Deployment - Phase 2Fixed

The report gives no description here.

MediumReached Quota Can Cause Loss of Fee - Phase 3Fixed

The report gives no description here.

MediumSecurity of ‘SignalService’ Network Is No Higher Than Its Weakest Node - Phase 2Fixed

The report gives no description here.

Show 10 more

MediumSome ERC-20 and ERC-721 Tokens Can Not Be Bridged - Phase 2Fixed

The report gives no description here.

MediumThe Guardian Cannot Re-Prove Invalid Transitions - Phase 1Fixed

The report gives no description here.

Low‘DelegateOwner’ Does Not Check for Contract Existence - Phase 3Fixed

The report gives no description here.

LowAssigned Prover Signature Is Underspecified - Phase 1Fixed

The report gives no description here.

LowBanned Addresses Could Be Called By Cross-Chain Messages - Phase 2Fixed

The report gives no description here.

LowDuplicated USDC Bridging - Phase 2Fixed

The report gives no description here.

LowERC20Airdrop Claims Can Be DOSed - Phase 2Fixed

The report gives no description here.

LowevaluatePoint Precompile Calls Revert - Phase 2Fixed

The report gives no description here.

LowHonest Provers Can Lose Money - Phase 1Fixed

The report gives no description here.

LowInaccurate Gas Limit on Message Invocation - Phase 3Fixed

The report gives no description here.

Show 10 more

LowIncorrect Calldata Gas Accounting in Message Processing - Phase 3Fixed

The report gives no description here.

LowInexplicit Revert - Phase 3Fixed

The report gives no description here.

LowLack of Constraints During Migration - Phase 3Fixed

The report gives no description here.

LowMessage Processors Can Control Gas and Fee Consumption - Phase 3Fixed

The report gives no description here.

LowStorage Collision in Bridge Contract - Phase 3Fixed

The report gives no description here.

LowThe Snapshooter Cannot Take Snapshots of the Taiko Token - Phase 1Fixed

The report gives no description here.

LowTimelockTokenPool Signatures Can Be Replayed - Phase 2Fixed

The report gives no description here.

LowToken Migrations Can Cause Losses - Phase 2Fixed

The report gives no description here.

LowUncontrolled Gas Consumption When Sending ETH in Cross-Chain Messages - Phase 1Fixed

The report gives no description here.

LowUnrestricted Receive Function - Phase 3Fixed

The report gives no description here.

Show 1 more

LowVaults Are Not ERC-165 Compliant - Phase 2Fixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (64)

packages/protocol/contracts/bridge/IBridge.sol
packages/protocol/contracts/L1/libs/LibProposing.sol
packages/protocol/contracts/L2/Lib1559Math.sol
packages/protocol/contracts/libs/LibTrieProof.sol
packages/protocol/contracts/thirdparty/optimism/Bytes.sol
packages/protocol/contracts/L1/gov/TaikoGovernor.sol
packages/protocol/contracts/L1/hooks/IHook.sol
packages/protocol/contracts/verifiers/IVerifier.sol
packages/protocol/contracts/tokenvault/IBridgedERC20.sol
packages/protocol/contracts/tokenvault/adapters/USDCAdapter.sol
packages/protocol/contracts/tokenvault/BridgedERC721.sol
packages/protocol/contracts/tokenvault/BridgedERC1155.sol
packages/protocol/contracts/L1/libs/LibUtils.sol
packages/protocol/contracts/L1/hooks/AssignmentHook.sol
packages/protocol/contracts/L1/libs/LibVerifying.sol
packages/protocol/contracts/tokenvault/ERC721Vault.sol
packages/protocol/contracts/tokenvault/ERC20Vault.sol
packages/protocol/contracts/common/EssentialContract.sol
packages/protocol/contracts/bridge/Bridge.sol
packages/protocol/contracts/L1/TaikoErrors.sol
packages/protocol/contracts/verifiers/SgxVerifier.sol
packages/protocol/contracts/thirdparty/solmate/LibFixedPointMath.sol
packages/protocol/contracts/libs/LibMath.sol
packages/protocol/contracts/thirdparty/optimism/rlp/RLPWriter.sol
packages/protocol/contracts/tokenvault/ERC1155Vault.sol
packages/protocol/contracts/tokenvault/LibBridgedToken.sol
packages/protocol/contracts/libs/LibAddress.sol
packages/protocol/contracts/libs/Lib4844.sol
packages/protocol/contracts/signal/ISignalService.sol
packages/protocol/contracts/L1/tiers/ITierProvider.sol
packages/protocol/contracts/team/TimelockTokenPool.sol
packages/protocol/contracts/tokenvault/BaseVault.sol
packages/protocol/contracts/thirdparty/optimism/trie/MerkleTrie.sol
packages/protocol/contracts/common/AddressManager.sol
packages/protocol/contracts/L1/gov/TaikoTimelockController.sol
packages/protocol/contracts/signal/LibSignals.sol
packages/protocol/contracts/verifiers/GuardianVerifier.sol
packages/protocol/contracts/L2/TaikoL2EIP1559Configurable.sol
packages/protocol/contracts/L2/TaikoL2.sol
packages/protocol/contracts/L1/TaikoEvents.sol
packages/protocol/contracts/team/airdrop/ERC20Airdrop.sol
packages/protocol/contracts/L1/libs/LibDepositing.sol
packages/protocol/contracts/L2/CrossChainOwned.sol
packages/protocol/contracts/tokenvault/BridgedERC20Base.sol
packages/protocol/contracts/tokenvault/BridgedERC20.sol
packages/protocol/contracts/thirdparty/optimism/trie/SecureMerkleTrie.sol
packages/protocol/contracts/L1/libs/LibProving.sol
packages/protocol/contracts/L1/tiers/TestnetTierProvider.sol
packages/protocol/contracts/common/IAddressResolver.sol
packages/protocol/contracts/signal/SignalService.sol
packages/protocol/contracts/L1/provers/GuardianProver.sol
packages/protocol/contracts/team/airdrop/MerkleClaimable.sol
packages/protocol/contracts/common/IAddressManager.sol
packages/protocol/contracts/L1/provers/Guardians.sol
packages/protocol/contracts/L1/ITaikoL1.sol
packages/protocol/contracts/thirdparty/nomad-xyz/ExcessivelySafeCall.sol
packages/protocol/contracts/L1/TaikoData.sol
packages/protocol/contracts/thirdparty/optimism/rlp/RLPReader.sol
packages/protocol/contracts/L1/tiers/DevnetTierProvider.sol
packages/protocol/contracts/L1/TaikoL1.sol
packages/protocol/contracts/tokenvault/BaseNFTVault.sol
packages/protocol/contracts/L1/tiers/MainnetTierProvider.sol
packages/protocol/contracts/L1/TaikoToken.sol
packages/protocol/contracts/common/AddressResolver.sol

Part of Taiko’s security record

Taiko

Audits2 audits by 2 firmsLast audit Jun 2024, by OpenZeppelin.

Critical findingsNo open critical findingsAcross the 2 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Taiko’s security record

Security firm

OpenZeppelin

67 projects reviewed · 184 reports · latest Aug 2026

See OpenZeppelin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.