Hyperlane Starknet Implementation updated review

Cairo Security ClanFiles named in the report

Audit · firm’s term: review

Cairo Security Clan reviewed Hyperlane (Hyperlane Starknet Implementation updated review) on 6 Sep 2025: 2 findings, 0 critical; all marked fixed.

No open critical findings
Open the reportOpen Hyperlane’s security record
Report stored on IPFS. Content hash bafybeibkbcaig3fyp5q3x6okthwhn2mvll745zdprm2ubxrituqb24olhi

Trustblock does not review code.

Findings2

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium000
Low002
LowInconsistent asset-to-share conversion in transfer functionsFixed

There is inconsistency in asset-to-share conversion handling between the transfer and transfer_from functions. The full impact was not clearly investigated due to time constraints. It is recommended to review and ensure consistent handling of conversions across all related functions.

LowInconsistent mutability in owner component referenceFixed

The function unenroll_remote_router uses a mutable reference to the owner component while similar functions use immutable references; this inconsistency introduces potential bugs. It is recommended to use immutable references for consistency.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (3)

  • cairocratescontractssrcclientrouter_component.cairo
  • cairocratescontractssrclib.cairo
  • cairocratestokensrcextensionshyp_erc20_vault.cairo

Part of Hyperlane’s security record

Hyperlane
Audits3 audits by 2 firmsLast audit Sep 2025, by Cairo Security Clan.
Critical findingsNo open critical findingsAcross the 3 reports, 3 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Hyperlane’s security record

Security firm

Cairo Security Clan

13 projects reviewed · 21 reports · latest Sep 2025

See Cairo Security Clan’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us