Biconomy security review

Pashov Audit GroupNot recorded. See the report

Pashov Audit Group reviewed Biconomy (Biconomy security review) on 14 May 2026: 7 findings, 0 critical; all marked fixed.

No open critical findings
Open the reportOpen Biconomy’s security record

Report hosted on GitHub.

Statuses are the security firm’s own, from this report. Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium000
Low007
Low_validateConstraints() may read beyond rawValue leading to zero-threshold issueFixed

The report gives no description here.

LowBytes32(c.referenceData) accepts noncanonical encodings of constraint valuesFixed

The report gives no description here.

LowEmpty OR constraints always fail without an explicit invalid-OR errorFixed

The report gives no description here.

LowIn constraint silently misbehaves for signed reference dataFixed

The report gives no description here.

LowNested-OR rejection is evaluation path dependent not structuralFixed

The report gives no description here.

LowNo clean way to ignore some returned fieldsFixed

The report gives no description here.

LowSigned constraints treat large positive values as negativeFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Biconomy’s security record

Biconomy
Audits3 audits by 2 firmsLast audit May 2026, by Pashov Audit Group.
Critical findingsNo open critical findingsAcross 3 reports.
Open Biconomy’s security record

Security firm

Pashov Audit Group

30 projects reviewed · 53 reports · latest Jul 2026

See Pashov Audit Group’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us