Nomad

Off-Chain (Private)

Audited on 2022/06/09

Rekt reported

Summary

**Initial audit**: <br> Through reviewing the code, we found **40 potential issues** of various levels of severity:`1` high-severity, `6` medium-severity, `18` low-severity, `9` informational-security and `6` undermined issues. We recommend addressing all the issues before deploying the code. </br> **After the re-audit**: </br> The Nomad team has fixed the majority of the issues and the contracts are ready to be deployed, we also found a new issue the QSP-40.

Project

Nomad

Ethereum

Issues (40)

	Low	Medium	High	Critical	Total
Not fixed	28	2	-	-	30
Fixed	5	4	1	-	10
Total	33	6	1	0	40

Contracts (66)

#	File Name
1	Nomad/monrepo/packages/contracts-core/contracts/test/TestQueue.sol
2	Nomad/monrepo/packages/contracts-core/contracts/Merkle.sol
3	Nomad/monrepo/packages/contracts-bridge/contracts/interfaces/ITokenRegistry.sol
4	Nomad/monrepo/packages/contracts-router/contracts/Router.sol
5	Nomad/monrepo/packages/contracts-core/contracts/libs/Merkle.sol
6	Nomad/monrepo/packages/contracts-bridge/contracts/test/MockWeth.sol
7	Nomad/monrepo/packages/contracts-core/contracts/test/TestReplica.sol
8	Nomad/zodiac/contracts/test/TestFactory.sol
9	Nomad/monrepo/packages/local-environment/tests/utils/token/contract/ERC20.sol
10	Nomad/monrepo/packages/contracts-core/contracts/test/TestXAppConnectionManager.sol

#	File Name
1	Nomad/monrepo/packages/contracts-core/contracts/test/TestQueue.sol
2	Nomad/monrepo/packages/contracts-core/contracts/Merkle.sol
3	Nomad/monrepo/packages/contracts-bridge/contracts/interfaces/ITokenRegistry.sol
4	Nomad/monrepo/packages/contracts-router/contracts/Router.sol
5	Nomad/monrepo/packages/contracts-core/contracts/libs/Merkle.sol
6	Nomad/monrepo/packages/contracts-bridge/contracts/test/MockWeth.sol
7	Nomad/monrepo/packages/contracts-core/contracts/test/TestReplica.sol
8	Nomad/zodiac/contracts/test/TestFactory.sol
9	Nomad/monrepo/packages/local-environment/tests/utils/token/contract/ERC20.sol
10	Nomad/monrepo/packages/contracts-core/contracts/test/TestXAppConnectionManager.sol

Nomad

Summary

Issues (40)

Long Queues Can Lead To Denial Of Servicenot_fixed/medium

Watcher Availability Concernnot_fixed/medium

`_dust` Method Can Be Abusednot_fixed/low

Incompatibility With Deflationary Tokensnot_fixed/low

Replay Attack In The `improperUpdate` not_fixed/low

Contracts (66)