Camp - Re-Audit

QuantstampCode version: not recorded (see the report)

Audit · firm’s term: re-audit

Version of Camp: counted once with it

Quantstamp reviewed Camp (Camp - Re-Audit) on 14 Aug 2025: 5 findings, 0 critical; 4 marked fixed, 1 open.

No open critical findings
Open the reportOpen Camp’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings5

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium001
Low103
LowExcess Native Tokens After Dust Adjustment Are Locked in EscrowOpen

In the `bridgeOut` function, a whitelisted sender must send a value at least equal to `_totalNativeTokens`. However, if the value sent exceeds `_totalNativeTokens`, the excess remains locked in the `CampTimelockEscrow` contract. Similarly, in the `release` function, small "dust" amounts of native tokens can remain locked. This occurs because `_totalNativeTokens` is calculated as `fee.nativeFee + _dustAdjustedAmount`, which may differ slightly from the original deposit amount.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Camp’s security record

Camp
Audits3 audits by 1 firmLast audit Sep 2025, by Quantstamp.
Critical findingsNo open critical findingsAcross 3 reports.
Open Camp’s security record

Security firm

Quantstamp

236 projects reviewed · 332 reports · latest Oct 2026

See Quantstamp’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us