Arbitrum Token Bridge

Quantstamp4 Aug 2021Files named in the report

Quantstamp reviewed Arbitrum (Arbitrum Token Bridge) on 4 Aug 2021: 9 findings, 0 critical; 4 marked fixed, 4 acknowledged, 1 open.

No open critical findings

Open the report Open Arbitrum’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings9

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	1
Medium	0	0	1
Low	1	4	2

LowUser May Lose Their Fund when Transferring Them From Layer1 to Layer2 with Insufficient Gas ProvidedOpen

Although there is the Retryable Tickets mechanism to help retry transactions sent from layer1 to layer2 when the transaction does not succeed the first time. A user may still lose their funds when transferring them from layer1 to layer2 and insufficient gas is provided. Currently, there is no way the user can rescue those lost funds.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (36)

tokenbridge/test/GatewayTest.sol
tokenbridge/ethereum/gateway/L1ArbitrumGateway.sol
tokenbridge/libraries/BytesParser.sol
tokenbridge/libraries/gateway/ICustomGateway.sol
tokenbridge/libraries/gateway/GatewayRouter.sol
tokenbridge/test/TestPostDepositCall.sol
tokenbridge/libraries/gateway/ArbitrumGateway.sol
tokenbridge/arbitrum/gateway/L2GatewayRouter.sol
tokenbridge/libraries/ClonableBeaconProxy.sol
tokenbridge/libraries/gateway/ITokenGateway.sol
tokenbridge/arbitrum/gateway/L2CustomGateway.sol
tokenbridge/ethereum/gateway/L1ArbitrumExtendedGateway.sol
tokenbridge/libraries/gateway/IGatewayRouter.sol
tokenbridge/test/TestERC20.sol
tokenbridge/test/TestCustomTokenL1.sol
tokenbridge/arbitrum/gateway/L2ERC20Gateway.sol
tokenbridge/ethereum/gateway/L1WethGateway.sol
tokenbridge/ethereum/gateway/L1ERC20Gateway.sol
tokenbridge/libraries/ITransferAndCall.sol
tokenbridge/libraries/L2GatewayToken.sol
tokenbridge/arbitrum/IArbToken.sol
tokenbridge/libraries/aeWETH.sol
tokenbridge/libraries/gateway/ArbitrumMessenger.sol
tokenbridge/test/TestArbCustomToken.sol
tokenbridge/ethereum/ICustomToken.sol
tokenbridge/libraries/IWETH9.sol
tokenbridge/test/TestWETH9.sol
tokenbridge/libraries/gateway/TokenGateway.sol
tokenbridge/arbitrum/gateway/L2ArbitrumGateway.sol
tokenbridge/arbitrum/gateway/L2WethGateway.sol
tokenbridge/libraries/TransferAndCallToken.sol
tokenbridge/test/InboxMock.sol
tokenbridge/ethereum/gateway/L1GatewayRouter.sol
tokenbridge/arbitrum/StandardArbERC20.sol
tokenbridge/ethereum/gateway/L1CustomGateway.sol
tokenbridge/libraries/aeERC20.sol

Part of Arbitrum’s security record

Arbitrum

Audits1 audit by 1 firmLast audit Aug 2021, by Quantstamp.

Critical findingsNo open critical findingsIn 1 report.

Open Arbitrum’s security record

Security firm

Quantstamp

236 projects reviewed · 332 reports · latest Oct 2026

See Quantstamp’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.