Paxos Cross Chain Integration audit

Trail of Bits7 Nov 2024Code version: not recorded (see the report)

Audit · firm’s term: security assessment

Trail of Bits reviewed Paxos (Paxos Cross Chain Integration audit) on 7 Nov 2024: 4 findings, 0 critical; all marked fixed.

No open critical findings

Open the report Open Paxos’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings4

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	0
Low	0	0	4

Marked Informational by the firm. Not counted as findings.

InformationalAccount incorrectly marked optionalFixed

The report gives no description here.

InformationalInsufficient testing of cross-chain-contracts-internal contractsFixed

The report gives no description here.

InformationalReimplementation of library-provided functionFixed

The report gives no description here.

InformationalsetEnforcedOptions.js script contains outdated codeFixed

The report gives no description here.

InformationalTests do not check emitted eventsFixed

The report gives no description here.

InformationalUnnecessary uses of mutFixed

The report gives no description here.

Informationalupdate_admin does not use a two-step transfer processFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Paxos’s security record

Paxos

Audits6 audits by 4 firmsLast audit Apr 2026, by Zellic.

Critical findingsNo open critical findingsAcross the 6 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Paxos’s security record

Security firm

Trail of Bits

7 projects reviewed · 7 reports · latest Jan 2025

See Trail of Bits’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.