Scroll Phase 2 Audit

Off-Chain (Private)

Audited on 2023/10/16

No active critical issues

Summary

Table of Contents Summary Type zkEVM-based zkRollup, Bridge & Rollup Timeline From 2023-06-05 To 2023-06-30 Languages Solidity Total Issues 22 (11 resolved) Critical Severity Issues 0 (0 resolved) High Severity Issues 1 (1 resolved) Medium Severity Issues 5 (4 resolved) Low Severity Issues 7 (6 resolved) Notes & Additional Information 9 (0 resolved) Scope We audited the scroll-tech/scroll repository at the 3bc8a3f commit. contracts... Update: It is important to note that the develop branch changed the codebase between the audit's start and the fix review. Hence, we only reviewed the fixes in their respective context and cannot guarantee other implications that were introduced in the meantime. System Overview Scroll is an EVM...

Project

Scroll

Multi-Chain

	Low	Medium	High	Critical	Total
Not fixed	1	-	-	-	1
Fixed	6	5	1	-	12
Total	7	5	1	0	13

Contracts (29)

#	File Name
1	contracts/src/L2/predeploys/IL1GasPriceOracle.sol
2	contracts/src/libraries/FeeVault.sol
3	contracts/src/L2/predeploys/L1BlockContainer.sol
4	contracts/src/L2/predeploys/L2TxFeeVault.sol
5	contracts/src/libraries/constants/ScrollPredeploy.sol
6	contracts/src/L2/predeploys/Whitelist.sol
7	contracts/src/L2/predeploys/IL1BlockContainer.sol
8	contracts/src/L2/gateways/L2ERC20Gateway.sol
9	contracts/src/L2/predeploys/WETH9.sol
10	contracts/src/libraries/common/OwnableBase.sol

#	File Name
1	contracts/src/L2/predeploys/IL1GasPriceOracle.sol
2	contracts/src/libraries/FeeVault.sol
3	contracts/src/L2/predeploys/L1BlockContainer.sol
4	contracts/src/L2/predeploys/L2TxFeeVault.sol
5	contracts/src/libraries/constants/ScrollPredeploy.sol
6	contracts/src/L2/predeploys/Whitelist.sol
7	contracts/src/L2/predeploys/IL1BlockContainer.sol
8	contracts/src/L2/gateways/L2ERC20Gateway.sol
9	contracts/src/L2/predeploys/WETH9.sol
10	contracts/src/libraries/common/OwnableBase.sol

Scroll Phase 2 Audit

Summary

Issues (13)

Unsafe ABI Encodingnot_fixed/low

Contracts (29)