BiconomyNexus security review
Audit · firm’s term: security review
Pashov Audit Group reviewed Biconomy (BiconomyNexus security review) on 25 Mar 2025: 15 findings, 0 critical; 11 marked fixed, 4 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings15
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 2 |
| Low | 0 | 4 | 9 |
MediumHook bypass via enable mode in module installationFixed
The report gives no description here.
MediumUsers can delete all validators from Nexus accountFixed
The report gives no description here.
LowCannot install preValidationHooks in NexusBoostrapFixed
The report gives no description here.
LowCannot opt out of hook in createAccount()Fixed
The report gives no description here.
LowcreateAccount() skips isModuleAllowed for prevalidation hooksFixed
The report gives no description here.
LowhandlePREP() lacks sufficient length validationFixed
The report gives no description here.
LowHook check may be bypassedFixed
The report gives no description here.
LowMODULE_ENABLE_MODE_TYPE_HASH is incompatible with eip-712Fixed
The report gives no description here.
LowRegistryFactory::removeAttester can reduce attester count under limitFixed
The report gives no description here.
LowStorage pattern inconsistency exposes registry variableFixed
The report gives no description here.
Show 1 more
LowUser can bypass the withHook modifierFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Biconomy’s security record
BiconomySecurity firm
Pashov Audit Group86 projects reviewed · 165 reports · latest Aug 2026
See Pashov Audit Group’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us