pyth2wormhole - Solana

CertiKCode version: not recorded (see the report)

CertiK reviewed Wormhole (pyth2wormhole - Solana) on 13 Dec 2022: 4 findings, 0 critical; 1 marked fixed, 3 open.

No open critical findings
Open the reportOpen Wormhole’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings4

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High100
Medium000
Low201
LowLack of validation between product and priceFixed

During the `attest` instruction, the program will check if the given product account matches the `prod` field in the price account. It will not check the price account record in the product account data(`px_acc` field). Our concern is that the presence of multiple price accounts for a single product account(e.g. an old price account) may result in inaccurate or invalid prices.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Wormhole’s security record

Wormhole
Audits11 audits by 4 firmsLast audit Oct 2024, by Cyfrin.
Critical findingsNo open critical findingsAcross 11 reports.
Open Wormhole’s security record

Security firm

CertiK

1,044 projects reviewed · 1,393 reports · latest May 2025

See CertiK’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us