Connext NXTP — Noncustodial Xchain Transfer Protoc

Consensys1 Jul 2021Files named in the report

Consensys reviewed Connext Network (Connext NXTP — Noncustodial Xchain Transfer Protoc) on 1 Jul 2021: 29 findings, 1 critical; 8 marked fixed, 21 open.

1 critical finding, fixed

Open the report Open Connext Network’s security record

Report hosted on diligence.security.

Trustblock does not review code.

Findings29

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	1
High	5	0	1
Medium	7	0	2
Low	9	0	4

CriticalTransactionManager - User might steal router’s locked fundsFixed

The report gives no description here.

HighTransactionManager - Flawed shares arithmeticFixed

The report gives no description here.

MediumProposedOwnable - two-step ownership transfer should be confirmed by the new ownerFixed

The report gives no description here.

MediumTransactionManager - Missing nonReentrant modifier on removeLiquidityFixed

The report gives no description here.

LowFulfillInterpreter - _transactionManager state variable can be immutable ✓Fixed

The report gives no description here.

LowFulfillInterpreter - Executed event can’t be linked to TransactionFulfilled eventFixed

The report gives no description here.

LowFulfillInterpreter - Missing check whether callTo address contains codeFixed

The report gives no description here.

LowTransactionManager - Risk mitigation for addLiquidity ✓Fixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (8)

packages/contracts/interfaces/IFulfillInterpreter.sol
packages/contracts/ProposedOwnable.sol
packages/contracts/libraries/WadRayMath.sol
packages/contracts/interfaces/IERC20Minimal.sol
packages/contracts/TransactionManager.sol
packages/contracts/libraries/Asset.sol
packages/contracts/interpreters/FulfillInterpreter.sol
packages/contracts/interfaces/ITransactionManager.sol

Part of Connext Network’s security record

Connext Network

Audits1 audit by 1 firmLast audit Jul 2021, by Consensys.

Critical findingsNo open critical findingsIn that report, 1 critical finding was reported. It is marked fixed by the firm that reported it.

Open Connext Network’s security record

Security firm

Consensys

41 projects reviewed · 59 reports · latest Oct 2024

See Consensys’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.