Wormhole Governor and Watchers

Trail of Bits7 Apr 2023Code version: not recorded (see the report)

Audit · firm’s term: Security Assessment

Trail of Bits reviewed Wormhole (Wormhole Governor and Watchers) on 7 Apr 2023: 7 findings, 0 critical; none marked fixed.

No open critical findings

Open the report Open Wormhole’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings17

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	0
Low	7	0	0

LowMissing or wrong context TimingOpen

The report gives no description here.

LowPolygonConnector does not properly use channels TimingOpen

The report gives no description here.

LowPotential nil pointer dereference in reloadPendingTransfer Data ValidationOpen

The report gives no description here.

LowReceiver closes channel, contradicting Golang guidance TimingOpen

The report gives no description here.

LowUnchecked type assertion in queryCoinGecko Data ValidationOpen

The report gives no description here.

LowUse of defer in a loop Denial of ServiceOpen

The report gives no description here.

LowVulnerable Go packages PatchingOpen

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Wormhole’s security record

Wormhole

Audits12 audits by 5 firmsLast audit Oct 2024, by Cyfrin.

Critical findingsNo open critical findingsAcross 12 reports.

Open Wormhole’s security record

Security firm

Trail of Bits

29 projects reviewed · 47 reports · latest Sep 2026

See Trail of Bits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.