Scroll Phase 2 Audit

Off-Chain (Private)

Audited on 2023/10/16

No active critical issues

Summary

Table of Contents Summary Type zkEVM-based zkRollup, Bridge & Rollup Timeline From 2023-06-05 To 2023-06-30 Languages Solidity Total Issues 22 (11 resolved) Critical Severity Issues 0 (0 resolved) High Severity Issues 1 (1 resolved) Medium Severity Issues 5 (4 resolved) Low Severity Issues 7 (6 resolved) Notes & Additional Information 9 (0 resolved) Scope We audited the scroll-tech/scroll repository at the 3bc8a3f commit. contracts... Update: It is important to note that the develop branch changed the codebase between the audit's start and the fix review. Hence, we only reviewed the fixes in their respective context and cannot guarantee other implications that were introduced in the meantime. System Overview Scroll is an EVM...

Project

Scroll

Multi-Chain

	Low	Medium	High	Critical	Total
Not fixed	1	-	-	-	1
Fixed	6	5	1	-	12
Total	7	5	1	0	13

Contracts (29)

#	File Name
11	contracts/src/L2/predeploys/L2MessageQueue.sol
12	contracts/src/libraries/common/AppendOnlyMerkleTree.sol
13	contracts/src/L2/gateways/L2StandardERC20Gateway.sol
14	contracts/src/L2/gateways/L2GatewayRouter.sol
15	contracts/src/L2/gateways/L2WETHGateway.sol
16	contracts/src/L2/gateways/L2CustomERC20Gateway.sol
17	contracts/src/L1/gateways/IL1ERC20Gateway.sol
18	contracts/src/L2/gateways/L2ERC721Gateway.sol
19	contracts/src/libraries/token/IScrollERC1155.sol
20	contracts/src/L1/gateways/IL1ERC721Gateway.sol

#	File Name
11	contracts/src/L2/predeploys/L2MessageQueue.sol
12	contracts/src/libraries/common/AppendOnlyMerkleTree.sol
13	contracts/src/L2/gateways/L2StandardERC20Gateway.sol
14	contracts/src/L2/gateways/L2GatewayRouter.sol
15	contracts/src/L2/gateways/L2WETHGateway.sol
16	contracts/src/L2/gateways/L2CustomERC20Gateway.sol
17	contracts/src/L1/gateways/IL1ERC20Gateway.sol
18	contracts/src/L2/gateways/L2ERC721Gateway.sol
19	contracts/src/libraries/token/IScrollERC1155.sol
20	contracts/src/L1/gateways/IL1ERC721Gateway.sol

Scroll Phase 2 Audit

Summary

Issues (13)

Unsafe ABI Encodingnot_fixed/low

Contracts (29)