Push Chain / EVM Gateway

HackenRepository at commit 0928967

Audit

Hacken reviewed Push Chain (Push Chain / EVM Gateway) on 4 Aug 2026: 38 findings, 0 critical; 28 marked fixed, 6 acknowledged, 4 open.

No open critical findings
Open the reportOpen Push Chain’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings38

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High002
Medium123
Low3423
MediumInconsistent Recipient Semantics Between Documentation and Funds Event EmissionAcknowledged

The report gives no description here.

MediumrescueFundsOnSourceChain Lacks Replay Protection and universalTxId–Token BindingAcknowledged

The report gives no description here.

LowDuplicate Logic in revertUniversalTx and rescueFunds Increases Maintenance RiskAcknowledged

The report gives no description here.

LowMissing Event Emissions for Critical Admin Configuration ChangesAcknowledged

The report gives no description here.

LowNative FUNDS Route Does Not Support Gas Top-Up BatchingAcknowledged

The report gives no description here.

LowRefund to Non-Receiving Contract Can Revert and Block Entire Outbound TransactionAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (24)

  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UEA/UEA_EVM.sol.func.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UEAFactoryV1.sol.func-c.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/libraries/TypesUG.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/UniversalGatewayPC.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UEAFactoryV1.sol.func.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/libraries/Errors.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UniversalGateway.sol.func.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/Vault.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UEA/UEA_SVM.sol.gcov.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UniversalGateway.sol.gcov.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/interfaces/IVaultPC.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/interfaces/IUniversalGateway.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UEA/UEA_SVM.sol.func.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/interfaces/IVault.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UniversalGateway.sol.func-c.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/interfaces/IUniversalGatewayPC.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UEA/UEA_EVM.sol.gcov.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UEA/UEA_EVM.sol.func-c.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UEAFactoryV1.sol.gcov.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/VaultPC.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/test/coverage/src/UEA/UEA_SVM.sol.func-c.html at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/libraries/Types.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/libraries/TypesUGPC.sol at commit 0928967cce6cdac2a584340892daf621ff173abd
  • https://github.com/pushchain/push-chain-interop-contracts/contracts/evm-gateway/src/UniversalGateway.sol at commit 0928967cce6cdac2a584340892daf621ff173abd

Part of Push Chain’s security record

Push Chain
Audits3 audits by 1 firmLast audit Aug 2026, by Hacken.
Critical findingsNo open critical findingsAcross 3 reports.
Open Push Chain’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us