Persistence Bridge - audit

Oak SecurityCode version: not recorded (see the report)

Audit · firm’s term: security audit

Oak Security reviewed Persistence (Persistence Bridge - audit) on 20 Jan 2022: 18 findings, 6 critical; 15 marked fixed, 3 acknowledged.

1 critical acknowledged, not fixed
Open the reportOpen Persistence’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings18

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical015
High003
Medium000
Low027

Marked Informational by the firm. Not counted as findings.

InformationalOnly the first public key from CASP is used, potentially leading to unexpected behaviourAcknowledged

The report gives no description here.

InformationalCASP pub key prefix is sliced off instead of asserted to be 04, length is not assertedFixed

The report gives no description here.

InformationalConfiguration can be updated even if it is sealedFixed

The report gives no description here.

InformationalHardcoded ethereum contract addresses might not work on different networksFixed

The report gives no description here.

InformationalShutdown is sealed even if bridge stop signal is set to false which prevents setting the signal subsequently to trueFixed

The report gives no description here.

InformationalUnrelated test code as part of the repoFixed

The report gives no description here.

InformationalUnused codeFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Persistence’s security record

Persistence
Audits4 audits by 2 firmsLast audit Apr 2024, by Hexens.
Critical findings2 criticals acknowledged, not fixedReported in 2 reports, the latest by Oak Security, Jan 2024. The team acknowledged both.
Open Persistence’s security record

Security firm

Oak Security

33 projects reviewed · 60 reports · latest May 2026

See Oak Security’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us