[SCA] Push Chain / Core Contracts

Multi-Chain

Audited on 2026/04/13

No open critical findings

Summary

Push Chain is a fully EVM-compatible Proof-of-Stake Layer 1 blockchain designed to enable universal application deployment. It allows developers to deploy a Solidity-based smart contract once on Push Chain, while enabling users from multiple blockchain networks to interact with it using their existing wallets.

Project

Push Chain

Multi-Chain

No open critical findings

Last audited on 2026/08/04

by Hacken

Auditor

Hacken

Multi-Chain

2.8bn TVL of audited projects

488 audits on Trustblock

Multi-Tags

Issues (48)

	Low	Medium	High	Critical	Total
Not fixed	6	-	-	-	6
Acknowledged	6	-	-	-	6
Fixed	31	4	1	-	36
Total	43	4	1	0	48

Contracts (98)

#	Github Repository	Commit Hash	File	Url
31	pushchain/push-chain-core-contracts	15b7054	src/libraries/Errors.sol	Check on Github
32	pushchain/push-chain-core-contracts	15b7054	test/coverage/test/mocks/MockPRC20.sol.func.html	Check on Github
33	pushchain/push-chain-core-contracts	15b7054	test/coverage/src/libraries/Utils.sol.func-c.html	Check on Github
34	pushchain/push-chain-core-contracts	15b7054	test/coverage/src/UniversalCore.sol.func.html	Check on Github
35	pushchain/push-chain-core-contracts	15b7054	test/coverage/src/UEA/UEAProxy.sol.func-c.html	Check on Github
36	pushchain/push-chain-core-contracts	15b7054	coverage-report/src/WPC.sol.gcov.html	Check on Github
37	pushchain/push-chain-core-contracts	15b7054	coverage-report/src/PRC20.sol.func-c.html	Check on Github
38	pushchain/push-chain-core-contracts	15b7054	src/WPC.sol	Check on Github
39	pushchain/push-chain-core-contracts	15b7054	coverage-report/src/UEA/UEAProxy.sol.func.html	Check on Github
40	pushchain/push-chain-core-contracts	15b7054	test/coverage/src/UEA/UEA_EVM.sol.gcov.html	Check on Github

#	Github Repository	Commit Hash	File	Url
31	pushchain/push-chain-core-contracts	15b7054	src/libraries/Errors.sol	Check on Github
32	pushchain/push-chain-core-contracts	15b7054	test/coverage/test/mocks/MockPRC20.sol.func.html	Check on Github
33	pushchain/push-chain-core-contracts	15b7054	test/coverage/src/libraries/Utils.sol.func-c.html	Check on Github
34	pushchain/push-chain-core-contracts	15b7054	test/coverage/src/UniversalCore.sol.func.html	Check on Github
35	pushchain/push-chain-core-contracts	15b7054	test/coverage/src/UEA/UEAProxy.sol.func-c.html	Check on Github
36	pushchain/push-chain-core-contracts	15b7054	coverage-report/src/WPC.sol.gcov.html	Check on Github
37	pushchain/push-chain-core-contracts	15b7054	coverage-report/src/PRC20.sol.func-c.html	Check on Github
38	pushchain/push-chain-core-contracts	15b7054	src/WPC.sol	Check on Github
39	pushchain/push-chain-core-contracts	15b7054	coverage-report/src/UEA/UEAProxy.sol.func.html	Check on Github
40	pushchain/push-chain-core-contracts	15b7054	test/coverage/src/UEA/UEA_EVM.sol.gcov.html	Check on Github

[SCA] Push Chain / Core Contracts

Summary

Issues (48)

[Dual Defense] Uninitialized Implementation Contracts Enable Delegatecall Hijackingnot_fixed/low

getOriginForUEA returns synthetic identity that may confuse authorization logicnot_fixed/low

Single-Call Execution Uses Implicit Dual Semantics for Value Handlingnot_fixed/low

Stale Gas Price Data Is Accepted Without Freshness Validationnot_fixed/low

Stored Gas Pool Configuration Diverges from Runtime Swap Resolutionnot_fixed/low

Contracts (98)