LayerZeroZROClaim security review

Pashov Audit Group15 Jun 2024Code version: not recorded (see the report)

Pashov Audit Group reviewed LayerZero (LayerZeroZROClaim security review) on 15 Jun 2024: 10 findings, 2 critical; 8 marked fixed, 2 acknowledged.

2 critical findings, fixed

Open the report Open LayerZero’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings10

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	2
High	0	0	2
Medium	0	1	2
Low	0	1	2

CriticalNumerators are off by oneFixed

The report gives no description here.

CriticalRemote donations are stuckFixed

The report gives no description here.

High_lzReceive reverts when there is a fee refundFixed

The report gives no description here.

HighWithdrawDonation can incur max slippageFixed

The report gives no description here.

MediumdonateAndClaim() will not work for remote donate and claimFixed

The report gives no description here.

MediumDonateRemote will fail to deploy when any of the stargate tokens is not setFixed

The report gives no description here.

LowDonations in the native token can be not countedFixed

The report gives no description here.

LowquoteClaimCallback has 0 slippage toleranceFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of LayerZero’s security record

LayerZero

Audits21 audits by 7 firmsLast audit May 2025, by Zellic.

Critical findingsNo open critical findingsAcross the 21 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.

Open LayerZero’s security record

Security firm

Pashov Audit Group

31 projects reviewed · 55 reports · latest Jul 2026

See Pashov Audit Group’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.