Securitize ZKsync Exit Bridge Audit Report

Cyfrin10 Jun 2026Code version: not recorded (see the report)

Cyfrin reviewed Securitize (Securitize ZKsync Exit Bridge Audit Report) on 10 Jun 2026: 4 findings, 0 critical; 1 marked fixed, 2 acknowledged, 1 open.

No open critical findings

Open Securitize’s security record

The original report was removed from its address (seen 18 Oct 2026).

Trustblock does not review code.

Findings4

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	0
Low	1	2	1

Marked Gas or Informational by the firm. Not counted as findings.

GasRedundant SLOAD of dsToken in Securitize- Bridge::bridgeDSTokensToAddressAcknowledged

The report gives no description here.

GasRedundant SLOAD of USDC in USDCBridgeV2::_transferUSDCAcknowledged

The report gives no description here.

GasUse assembly call for ETH transfers that discard return dataAcknowledged

The report gives no description here.

InformationalRemove unused import BaseDSContract from SecuritizeBridge.solFixed

The report gives no description here.

InformationalRemove ZKSyncSecuritizeBridge::withdrawETH and in bridgeDSTokens revert when msg.value > 0Fixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Securitize’s security record

Securitize

Audits37 audits by 2 firmsLast audit Sep 2026, by Cyfrin.

Critical findingsNo open critical findingsAcross the 37 reports, 6 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Securitize’s security record

Security firm

Cyfrin

28 projects reviewed · 79 reports · latest Sep 2026

See Cyfrin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.