Aligned Layer
Consensys reviewed Aligned (Aligned Layer) on 1 Aug 2024: 20 findings, 3 critical; 17 marked fixed, 3 open.
Report hosted on diligence.security.
Trustblock does not review code.
Findings20
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 1 | 0 | 2 |
| High | 0 | 0 | 3 |
| Medium | 1 | 0 | 5 |
| Low | 1 | 0 | 7 |
CriticalFrontrunning DoS on createNewTask Allows Anyone to Block Legitimate batchMerkleRoot SubmissionsFixed
The report gives no description here.
CriticalPublic Visibility on checkMerkleRootAndVerifySignatures Allows for DOS Attacks and User Fund LossFixed
The report gives no description here.
HighBatcher Balance May Be InsufficientFixed
The report gives no description here.
Hightx.gasprice Allows a Malicious User to Steal All Funds From the Batcher BalanceFixed
The report gives no description here.
HighUse EIP-712-style Signed Hashing to Prevent Cross-Chain Signature ReplayingFixed
The report gives no description here.
MediumAfter Unlocking Once, User Balances Remain Unlocked ForeverFixed
The report gives no description here.
MediumBatcherPaymentService - Non-Atomic Contract Deployment and Initialization Forge Script Can Be Front RunFixed
The report gives no description here.
MediumDirect Usage of ecrecover()Fixed
The report gives no description here.
MediumNo Admin Withdraw Functions on ContractsFixed
The report gives no description here.
MediumUnnecessary Low-Level CallFixed
The report gives no description here.
Show 7 more
LowAlignedLayerServiceManager.initialize Should Call ServiceManager.__ServiceManagerBase_initFixed
The report gives no description here.
LowCritical State-Altering Operations Lack Event Emissions, Reducing Transparency and Auditability.Fixed
The report gives no description here.
LowProvide an Interface for AlignedLayerServiceManager ✓Fixed
The report gives no description here.
LowSolidity Coding Style Guideline ViolationsFixed
The report gives no description here.
LowStorage Layout Contract Should Be Declared abstractFixed
The report gives no description here.
LowUnused ImportsFixed
The report gives no description here.
LowWhere Possible, a Specific Contract Type Should Be Used Rather Than address ✓Fixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (3)
- contracts/src/core/BatcherPaymentService.sol
- contracts/src/core/AlignedLayerServiceManager.sol
- contracts/src/core/AlignedLayerServiceManagerStorage.sol
Part of Aligned’s security record
AlignedSecurity firm
Consensys41 projects reviewed · 59 reports · latest Oct 2024
See Consensys’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us