Push Chain / EVM Gateway

HackenRepository at commit 0928967

Audit

Hacken reviewed Push Chain (Push Chain / EVM Gateway) on 4 Aug 2026: 38 findings, 0 critical; 28 marked fixed, 6 acknowledged, 4 open.

No open critical findings
Open the reportOpen Push Chain’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings38

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High002
Medium123
Low3423
MediumupdateEpochDuration Implicitly Resets Rate-Limit Usage for All TokensOpen

The report gives no description here.

LowAdmin Front-Run Risk on Protocol Fee UpdatesOpen

The report gives no description here.

LowsetVault Migration Can Orphan Previously Locked ERC20 Funds in the Old VaultOpen

The report gives no description here.

LowUsers Have No Control Over Swap Parameters in Outbound Gas-Fee ConversionOpen

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (24)

  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UEA/UEA_EVM.sol.func.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UEAFactoryV1.sol.func-c.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/libraries/TypesUG.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/UniversalGatewayPC.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UEAFactoryV1.sol.func.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/libraries/Errors.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UniversalGateway.sol.func.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/Vault.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UEA/UEA_SVM.sol.gcov.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UniversalGateway.sol.gcov.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/interfaces/IVaultPC.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/interfaces/IUniversalGateway.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UEA/UEA_SVM.sol.func.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/interfaces/IVault.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UniversalGateway.sol.func-c.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/interfaces/IUniversalGatewayPC.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UEA/UEA_EVM.sol.gcov.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UEA/UEA_EVM.sol.func-c.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UEAFactoryV1.sol.gcov.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/VaultPC.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UEA/UEA_SVM.sol.func-c.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/libraries/Types.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/libraries/TypesUGPC.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/UniversalGateway.sol at commit 0928967cce6cdac2a584340892daf621ff173abd

Part of Push Chain’s security record

Push Chain
Audits3 audits by 1 firmLast audit Aug 2026, by Hacken.
Critical findingsNo open critical findingsAcross 3 reports.
Open Push Chain’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us