Socket
Consensys reviewed Socket Protocol (Socket) on 1 Feb 2023: 19 findings, 0 critical; none marked fixed.
Report hosted on diligence.security.
Trustblock does not review code.
Findings19
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 2 | 0 | 0 |
| Medium | 3 | 0 | 0 |
| Low | 14 | 0 | 0 |
HighCalls Made to Non-Existent/Removed Routes or Controllers Will Not Result in FailureOpen
The report gives no description here.
HighFunds Refunded From Celer Bridge Might Be StolenOpen
The report gives no description here.
MediumDependency on Third-Party APIs to Create the Right PayloadOpen
The report gives no description here.
MediumNativeOptimismImpl - Events Will Not Be Emitted in Case of Non-Native Tokens BridgingOpen
The report gives no description here.
MediumOwner Can Add Arbitrary Code to Be Executed From the SocketGateway ContractOpen
The report gives no description here.
LowConsider Adding a Task to CI/CD to Verify That Future Delegatee Contracts Are SafeOpen
The report gives no description here.
LowConsider Adding Non-Reentrant Modifiers to State-Changing Functions in SocketGatewayOpen
The report gives no description here.
LowConsider Using a Package Manager Instead of Vendor CodeOpen
The report gives no description here.
LowDestroyed Routes Eth Balances Will Be Left Locked in SocketDeployFactoryOpen
The report gives no description here.
LowDuplicated CodeOpen
The report gives no description here.
Show 9 more
LowEther Might Be Sent to Routes by Mistake, and Can Be StolenOpen
The report gives no description here.
LowGas OptimizationsOpen
The report gives no description here.
LowInaccurate Interface.Open
The report gives no description here.
LowInconsistent CommentsOpen
The report gives no description here.
LowNo Event Is Emitted When Invoking a Route Through the socketGateway Fallback FunctionOpen
The report gives no description here.
LowPossible Double Spends of msg.value in Code Paths That Include More Than One DelegatecallOpen
The report gives no description here.
LowUnused Error Codes.Open
The report gives no description here.
LowUse the Same Solidity Version Across ContractsOpen
The report gives no description here.
LowValidate Array Length Matching Before Execution to Avoid RevertsOpen
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (27)
- src/bridges/cbridge/interfaces/ICelerStorageWrapper.sol
- src/libraries/LibBytes.sol
- src/bridges/stargate/interfaces/stargate.sol
- src/deployFactory/SocketDeployFactory.sol
- src/swap/SwapImplBase.sol
- src/bridges/BridgeImplBase.sol
- src/interfaces/ISocketController.sol
- src/interfaces/ISocketRoute.sol
- src/libraries/Pb.sol
- src/bridges/stargate/l2/Stargate.sol
- src/controllers/FeesTakerController.sol
- src/controllers/RefuelSwapAndBridgeController.sol
- src/libraries/LibUtil.sol
- src/interfaces/ISocketGateway.sol
- src/errors/SocketErrors.sol
- src/SocketGateway.sol
- src/utils/Ownable.sol
- src/controllers/BaseController.sol
- src/deployFactory/DisabledSocketRoute.sol
- src/bridges/cbridge/CelerStorageWrapper.sol
- src/swap/oneinch/OneInchImpl.sol
- src/interfaces/ISocketBridgeBase.sol
- src/bridges/cbridge/CelerImpl.sol
- src/static/RouteIdentifiers.sol
- src/bridges/stargate/l1/Stargate.sol
- src/bridges/cbridge/interfaces/cbridge.sol
- src/interfaces/ISocketRequest.sol
Part of Socket Protocol’s security record
Socket ProtocolSecurity firm
Consensys41 projects reviewed · 59 reports · latest Oct 2024
See Consensys’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us