Nomad

Off-Chain (Private)

Audited on 2022/06/09

Rekt reported

Summary

**Initial audit**: <br> Through reviewing the code, we found **40 potential issues** of various levels of severity:`1` high-severity, `6` medium-severity, `18` low-severity, `9` informational-security and `6` undermined issues. We recommend addressing all the issues before deploying the code. </br> **After the re-audit**: </br> The Nomad team has fixed the majority of the issues and the contracts are ready to be deployed, we also found a new issue the QSP-40.

Project

Nomad

Ethereum

Issues (40)

	Low	Medium	High	Critical	Total
Not fixed	28	2	-	-	30
Fixed	5	4	1	-	10
Total	33	6	1	0	40

Contracts (66)

#	File Name
51	Nomad/monrepo/packages/contracts-bridge/contracts/TokenRegistry.sol
52	Nomad/monrepo/packages/contracts-core/contracts/test/bad-recipient/BadRecipient6.sol
53	Nomad/monrepo/packages/contracts-core/contracts/interfaces/IMessageRecipient.sol
54	Nomad/monrepo/packages/contracts-core/contracts/test/TestHome.sol
55	Nomad/monrepo/packages/contracts-core/contracts/test/TestGovernanceMessage.sol
56	Nomad/monrepo/packages/contracts-bridge/contracts/interfaces/IBridgeToken.sol
57	Nomad/monrepo/packages/contracts-core/contracts/libs/TypeCasts.sol
58	Nomad/monrepo/packages/contracts-core/contracts/interfaces/IUpdaterManager.sol
59	Nomad/monrepo/packages/contracts-bridge/contracts/test/MockCore.sol
60	Nomad/monrepo/packages/contracts-core/contracts/test/bad-recipient/BadRecipientHandle.sol

#	File Name
51	Nomad/monrepo/packages/contracts-bridge/contracts/TokenRegistry.sol
52	Nomad/monrepo/packages/contracts-core/contracts/test/bad-recipient/BadRecipient6.sol
53	Nomad/monrepo/packages/contracts-core/contracts/interfaces/IMessageRecipient.sol
54	Nomad/monrepo/packages/contracts-core/contracts/test/TestHome.sol
55	Nomad/monrepo/packages/contracts-core/contracts/test/TestGovernanceMessage.sol
56	Nomad/monrepo/packages/contracts-bridge/contracts/interfaces/IBridgeToken.sol
57	Nomad/monrepo/packages/contracts-core/contracts/libs/TypeCasts.sol
58	Nomad/monrepo/packages/contracts-core/contracts/interfaces/IUpdaterManager.sol
59	Nomad/monrepo/packages/contracts-bridge/contracts/test/MockCore.sol
60	Nomad/monrepo/packages/contracts-core/contracts/test/bad-recipient/BadRecipientHandle.sol

Nomad

Summary

Issues (40)

Long Queues Can Lead To Denial Of Servicenot_fixed/medium

Watcher Availability Concernnot_fixed/medium

`_dust` Method Can Be Abusednot_fixed/low

Incompatibility With Deflationary Tokensnot_fixed/low

Replay Attack In The `improperUpdate` not_fixed/low

Contracts (66)