Push Chain / Core Contracts

HackenRepository at commit 15b7054

Audit

Hacken reviewed Push Chain (Push Chain / Core Contracts) on 13 Apr 2026: 48 findings, 0 critical; 36 marked fixed, 6 acknowledged, 6 open.

No open critical findings
Open the reportOpen Push Chain’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings48

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium004
Low6631
Low[Dual Defense] Uninitialized Implementation Contracts Enable Delegatecall HijackingOpen

The report gives no description here.

LowgetOriginForUEA returns synthetic identity that may confuse authorization logicOpen

The report gives no description here.

LowSingle-Call Execution Uses Implicit Dual Semantics for Value HandlingOpen

The report gives no description here.

LowStale Gas Price Data Is Accepted Without Freshness ValidationOpen

The report gives no description here.

LowStored Gas Pool Configuration Diverges from Runtime Swap ResolutionOpen

The report gives no description here.

LowUniversalPayload.nonce Is Ignored During Signature HashingOpen

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (98)

  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEA_EVM.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/mocks/MockPRC20.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/Interfaces/ICEA.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEAProxy.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/cea/CEAProxy.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEAMigration.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/MockPRC20.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/mocks/MockWPC.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEAMigration.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UniversalCore.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEA_SVM.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/Interfaces/IUniversalCore.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/MockWPC.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/MaliciousPRC20.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/MockPRC20.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/RevertingPRC20.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEAProxy.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEA_EVM.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/libraries/Utils.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/RevertingPRC20.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/Interfaces/IPRC20.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEA_SVM.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEA_EVM.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/MaliciousPRC20.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/Interfaces/IWPC.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/uea/UEAFactory.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/PRC20.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/PRC20.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEA_SVM.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/MockWPC.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/MockPRC20.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/uea/UEAProxy.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/WPC.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEAMigration.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UniversalCore.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/libraries/Utils.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/uea/UEAMigration.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/WPC.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/MaliciousPRC20.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEAProxy.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/libraries/Utils.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/UniversalCore.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/RevertingPRC20.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/MaliciousPRC20.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/Interfaces/IUEAFactory.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/cea/CEA.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/libraries/Utils.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEAMigration.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/cea/CEAMigration.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/WPC.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/MockPRC20.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/Interfaces/ICEAFactory.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/uea/UEA_EVM.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/mocks/RevertingPRC20.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UniversalCore.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEA_EVM.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/WPC.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/MockWPC.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/WPC.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEAMigration.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEA_SVM.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/cea/CEAFactory.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/libraries/Utils.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/PRC20.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEAMigration.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/PRC20.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/PRC20.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/MockPRC20.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/MaliciousPRC20.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/MockWPC.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/RevertingPRC20.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEA_SVM.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/WPC.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UniversalCore.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEA_EVM.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/RevertingPRC20.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UniversalCore.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/MaliciousPRC20.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/mocks/MaliciousPRC20.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/libraries/Types.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/MockWPC.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/RevertingPRC20.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEAProxy.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/PRC20.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEA_EVM.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEAProxy.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEA_SVM.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/PRC20.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/WPC.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEAProxy.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UniversalCore.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/libraries/Utils.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/MockPRC20.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/libraries/Errors.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/MockWPC.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/Interfaces/ICEAProxy.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/uea/UEA_SVM.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/libraries/Utils.sol at commit 15b7054

Part of Push Chain’s security record

Push Chain
Audits3 audits by 1 firmLast audit Aug 2026, by Hacken.
Critical findingsNo open critical findingsAcross 3 reports.
Open Push Chain’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us