Matrixdock Audit Report
Cyfrin reviewed Matrixdock (Matrixdock Audit Report) on 9 Apr 2025: 4 findings, 0 critical; all acknowledged, none fixed.
The original report was removed from its address (seen 17 Oct 2026).
Trustblock does not review code.
Findings4
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 4 | 0 |
Marked Gas or Informational by the firm. Not counted as findings.
GasCache amount and use Solady SafeTransferLib::safeTransferETH when refunding excess feeAcknowledged
The report gives no description here.
InformationalLayerZero integration can be paused but CCIP integration can’t be pausedAcknowledged
The report gives no description here.
InformationalOnly emit events when state actually changesAcknowledged
The report gives no description here.
InformationalUse consistent prefix for internal function namesAcknowledged
The report gives no description here.
InformationalConsider renaming MTokenMessagerBase::ccipClient as it is used by LayerZero integration and actually refers to MTokenFixed
The report gives no description here.
InformationalDon’t allow pausing for LayerZero receive, only sendFixed
The report gives no description here.
InformationalEmit missing events for important state changesFixed
The report gives no description here.
InformationalUnnecessary code duplication in MTokenMessager::sendDataToChainFixed
The report gives no description here.
InformationalUnused event OwnershipTransferRequested in MTokenMessagerLZFixed
The report gives no description here.
GasUse immutable for storage slots only set once in the constructor of non-upgradeable contractsFixed
The report gives no description here.
Show 3 more
InformationalUse named importsFixed
The report gives no description here.
InformationalUse named mappingsFixed
The report gives no description here.
GasUse named returns especially for memory outputsFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Matrixdock’s security record
MatrixdockSecurity firm
Cyfrin28 projects reviewed · 79 reports · latest Sep 2026
See Cyfrin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us