Push Chain / Core Contracts

HackenRepository at commit 15b7054

Audit

Hacken reviewed Push Chain (Push Chain / Core Contracts) on 13 Apr 2026: 48 findings, 0 critical; 36 marked fixed, 6 acknowledged, 6 open.

No open critical findings
Open the reportOpen Push Chain’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings48

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium004
Low6631
LowCEA Multicall Does Not Enforce Aggregate Value BoundsAcknowledged

The report gives no description here.

LowchainHeightByChainNamespace Is Stored but UnusedAcknowledged

The report gives no description here.

LowGas Inefficiency Due To Dynamic String Mapping KeysAcknowledged

The report gives no description here.

LowLeading-Zero Chain IDs Create Ambiguous Numeric InterpretationAcknowledged

The report gives no description here.

LowUEA migration can be triggered by UNIVERSAL_EXECUTOR_MODULE without user signature/consentAcknowledged

The report gives no description here.

LowVerificationType field is signed but never enforced on-chainAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (98)

  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEA_EVM.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/mocks/MockPRC20.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/Interfaces/ICEA.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEAProxy.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/cea/CEAProxy.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEAMigration.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/MockPRC20.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/mocks/MockWPC.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEAMigration.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UniversalCore.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEA_SVM.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/Interfaces/IUniversalCore.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/MockWPC.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/MaliciousPRC20.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/MockPRC20.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/RevertingPRC20.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEAProxy.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEA_EVM.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/libraries/Utils.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/RevertingPRC20.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/Interfaces/IPRC20.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEA_SVM.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEA_EVM.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/MaliciousPRC20.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/Interfaces/IWPC.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/uea/UEAFactory.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/PRC20.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/PRC20.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEA_SVM.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/MockWPC.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/MockPRC20.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/uea/UEAProxy.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/WPC.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEAMigration.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UniversalCore.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/libraries/Utils.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/uea/UEAMigration.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/WPC.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/MaliciousPRC20.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEAProxy.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/libraries/Utils.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/UniversalCore.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/RevertingPRC20.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/MaliciousPRC20.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/Interfaces/IUEAFactory.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/cea/CEA.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/libraries/Utils.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEAMigration.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/cea/CEAMigration.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/WPC.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/MockPRC20.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/Interfaces/ICEAFactory.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/uea/UEA_EVM.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/mocks/RevertingPRC20.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UniversalCore.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEA_EVM.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/WPC.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/MockWPC.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/WPC.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEAMigration.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEA_SVM.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/cea/CEAFactory.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/libraries/Utils.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/PRC20.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEAMigration.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/PRC20.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/PRC20.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/MockPRC20.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/MaliciousPRC20.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/MockWPC.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/RevertingPRC20.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEA_SVM.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/WPC.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UniversalCore.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEA_EVM.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/RevertingPRC20.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UniversalCore.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/MaliciousPRC20.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/mocks/MaliciousPRC20.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/libraries/Types.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/MockWPC.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/test/mocks/RevertingPRC20.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEAProxy.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/PRC20.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEA_EVM.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/UEA/UEAProxy.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEA_SVM.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/PRC20.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/coverage-report/src/WPC.sol.gcov.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UEA/UEAProxy.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/UniversalCore.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/src/libraries/Utils.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/MockPRC20.sol.func.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/libraries/Errors.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/test/coverage/test/mocks/MockWPC.sol.func-c.html at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/Interfaces/ICEAProxy.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/uea/UEA_SVM.sol at commit 15b7054
  • https://github.com/pushchain/push-chain-core-contracts/src/libraries/Utils.sol at commit 15b7054

Part of Push Chain’s security record

Push Chain
Audits3 audits by 1 firmLast audit Aug 2026, by Hacken.
Critical findingsNo open critical findingsAcross 3 reports.
Open Push Chain’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us