nexus-PR214

Cantina20 Nov 2024Not recorded. See the report

Cantina reviewed Biconomy (nexus-PR214) on 20 Nov 2024: 7 findings, 0 critical; all marked fixed.

No open critical findings

Open the report Open Biconomy’s security record

Report hosted on cantina.xyz.

Statuses are the security firm’s own, from this report. Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	1
Low	0	0	6

MediumIn Nexus:checkERC7739Support() only the last validator is checked to determine if the smart account supports ERC7739Fixed

The report gives no description here.

LowChange in ERC7739 magic number can break things when ERC7739 standard gets updatedFixed

The report gives no description here.

LowisValidSignature() in Nexus.sol can be optimized for cases when the call is not a ERC7739 detection requestFixed

The report gives no description here.

LowisValidSignatureWithSender() also checks signature s value for ERC7739 support detection calls which is unnecessaryFixed

The report gives no description here.

LowNewer version of solady's ECDSA library availableFixed

The report gives no description here.

LowNexus deviates from ERC1271 reference implementationFixed

The report gives no description here.

LowWrong docs for isValidSignatureWithSender() in K1ValidatorFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Biconomy’s security record

Biconomy

Audits3 audits by 2 firmsLast audit May 2026, by Pashov Audit Group.

Critical findingsNo open critical findingsAcross 3 reports.

Open Biconomy’s security record

Security firm

Cantina

37 projects reviewed · 175 reports · latest Oct 2026

See Cantina’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.