Connext NXTP — Noncustodial Xchain Transfer Protoc

Off-Chain (Private)

Audited on 2021/07/01

No active critical issues

Summary

Executive Summary This report presents the results of our engagement with Connext to review their NXTP protocol for crosschain transfers. The review was conducted over two weeks, from July 26 to August 6, 2021, by Heiko Fisch, David Oz Kashi, and Martin Ortner. A total of 25 person-days were spent. The off-chain code components were reviewed on a best effort basis considering the given time constraints. During the first week, we focused on both the on-chain components of the system and the router (TypeScript) component.

Project

Connext Network

Multi-Chain

Issues (29)

	Low	Medium	High	Critical	Total
Not fixed	9	7	5	-	21
Fixed	4	2	1	1	8
Total	13	9	6	1	29

Contracts (8)

#	File Name
1	packages/contracts/interfaces/IFulfillInterpreter.sol
2	packages/contracts/ProposedOwnable.sol
3	packages/contracts/libraries/WadRayMath.sol
4	packages/contracts/interfaces/IERC20Minimal.sol
5	packages/contracts/TransactionManager.sol
6	packages/contracts/libraries/Asset.sol
7	packages/contracts/interpreters/FulfillInterpreter.sol
8	packages/contracts/interfaces/ITransactionManager.sol

#	File Name
1	packages/contracts/interfaces/IFulfillInterpreter.sol
2	packages/contracts/ProposedOwnable.sol
3	packages/contracts/libraries/WadRayMath.sol
4	packages/contracts/interfaces/IERC20Minimal.sol
5	packages/contracts/TransactionManager.sol
6	packages/contracts/libraries/Asset.sol
7	packages/contracts/interpreters/FulfillInterpreter.sol
8	packages/contracts/interfaces/ITransactionManager.sol

Connext NXTP — Noncustodial Xchain Transfer Protoc

Summary

Issues (29)

Unknownnot_fixed/high

Unknownnot_fixed/high

Unknownnot_fixed/high

Unknownnot_fixed/high

Unknownnot_fixed/high

Contracts (8)