Multi-Gov: Cross Chain Governance Audit Report
Cyfrin reviewed Wormhole (Multi-Gov: Cross Chain Governance Audit Report) on 4 Oct 2024: 9 findings, 0 critical; 4 marked fixed, 5 acknowledged.
The original report was removed from its address (seen 17 Oct 2026).
Trustblock does not review code.
Findings9
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 5 | 4 |
Marked Gas or Informational by the firm. Not counted as findings.
Gas_checkProposalEligibility gas optimizationAcknowledged
The report gives no description here.
InformationalMissing deployment script for HubEvmSpokeAggregateProposerAcknowledged
The report gives no description here.
InformationalMissing implementation to cast fractional vote with signatureAcknowledged
The report gives no description here.
InformationalPotential long-term failure in HubGovernor::getVotes due to uint32 Casting of TimestampsAcknowledged
The report gives no description here.
GasHash comparison can be optimizedFixed
The report gives no description here.
InformationalInconsistent documentation related to the deployment of SpokeMessage- ExecutorFixed
The report gives no description here.
InformationalMissing event emissions when changing critical parametersFixed
The report gives no description here.
InformationalProposal deadline extension is allowed even in Pending stateFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Wormhole’s security record
WormholeSecurity firm
Cyfrin28 projects reviewed · 79 reports · latest Sep 2026
See Cyfrin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us