Audit Report (MessageLib)
Paladin reviewed LayerZero (Audit Report (MessageLib)) on 15 Dec 2023: 29 findings, 0 critical; 17 marked fixed, 10 acknowledged, 2 open.
Trustblock does not review code.
Findings29
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 1 | 3 | 1 |
| Low | 1 | 7 | 15 |
HighThe deliver function can be frontrun to prevent normal execution through an insufficient execution gas amountFixed
The report gives no description here.
MediumUsing identical configuration for both sending and receiving is potentially limiting for asymmetric applicationsFixed
The report gives no description here.
Lowdecode does not handle a zero _options lengthFixed
The report gives no description here.
LowGas optimizationFixed
The report gives no description here.
LowGas optimizationFixed
The report gives no description here.
LowGas optimizationsFixed
The report gives no description here.
LowGas optimizationsFixed
The report gives no description here.
LowGas optimizationsFixed
The report gives no description here.
LowGas optimizationsFixed
The report gives no description here.
LowGovernance risk: Apps must make sure to not give infinite allowance to this contract as this could result in the allowance being drained if the LayerZero governance is compromisedFixed
The report gives no description here.
Show 7 more
LowTypographical issuesFixed
The report gives no description here.
LowTypographical issuesFixed
The report gives no description here.
LowTypographical issuesFixed
The report gives no description here.
LowTypographical issuesFixed
The report gives no description here.
LowTypographical issuesFixed
The report gives no description here.
LowTypographical issuesFixed
The report gives no description here.
LowTypographical issuesFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of LayerZero’s security record
LayerZeroSecurity firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us