Aligned security record
As of 30 Oct 2026, Aligned has 1 audit report on Trustblock, by Consensys, dated 1 Aug 2024. That report lists 1 open critical finding.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Aligned Layer | Security firm: Consensys | Date: | Scope: Files named in the report | 1 open critical finding | Open · diligence.security |
Findings20
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 1 | 0 | 2 |
| High | 0 | 0 | 3 |
| Medium | 1 | 0 | 5 |
| Low | 1 | 0 | 7 |
CriticalFrontrunning DoS on createNewTask Allows Anyone to Block Legitimate batchMerkleRoot SubmissionsAligned Layer · Consensys · 1 Aug 2024Fixed
The report gives no description here.
Open the reportCriticalPublic Visibility on checkMerkleRootAndVerifySignatures Allows for DOS Attacks and User Fund LossAligned Layer · Consensys · 1 Aug 2024Fixed
The report gives no description here.
Open the reportHighBatcher Balance May Be InsufficientAligned Layer · Consensys · 1 Aug 2024Fixed
The report gives no description here.
Open the reportHightx.gasprice Allows a Malicious User to Steal All Funds From the Batcher BalanceAligned Layer · Consensys · 1 Aug 2024Fixed
The report gives no description here.
Open the reportHighUse EIP-712-style Signed Hashing to Prevent Cross-Chain Signature ReplayingAligned Layer · Consensys · 1 Aug 2024Fixed
The report gives no description here.
Open the reportMediumAfter Unlocking Once, User Balances Remain Unlocked ForeverAligned Layer · Consensys · 1 Aug 2024Fixed
The report gives no description here.
Open the reportMediumBatcherPaymentService - Non-Atomic Contract Deployment and Initialization Forge Script Can Be Front RunAligned Layer · Consensys · 1 Aug 2024Fixed
The report gives no description here.
Open the reportMediumDirect Usage of ecrecover()Aligned Layer · Consensys · 1 Aug 2024Fixed
The report gives no description here.
Open the reportMediumNo Admin Withdraw Functions on ContractsAligned Layer · Consensys · 1 Aug 2024Fixed
The report gives no description here.
Open the reportMediumUnnecessary Low-Level CallAligned Layer · Consensys · 1 Aug 2024Fixed
The report gives no description here.
Open the reportShow 7 more
LowAlignedLayerServiceManager.initialize Should Call ServiceManager.__ServiceManagerBase_initAligned Layer · Consensys · 1 Aug 2024Fixed
The report gives no description here.
Open the reportLowCritical State-Altering Operations Lack Event Emissions, Reducing Transparency and Auditability.Aligned Layer · Consensys · 1 Aug 2024Fixed
The report gives no description here.
Open the reportLowProvide an Interface for AlignedLayerServiceManager ✓Aligned Layer · Consensys · 1 Aug 2024Fixed
The report gives no description here.
Open the reportLowSolidity Coding Style Guideline ViolationsAligned Layer · Consensys · 1 Aug 2024Fixed
The report gives no description here.
Open the reportLowStorage Layout Contract Should Be Declared abstractAligned Layer · Consensys · 1 Aug 2024Fixed
The report gives no description here.
Open the reportLowUnused ImportsAligned Layer · Consensys · 1 Aug 2024Fixed
The report gives no description here.
Open the reportLowWhere Possible, a Specific Contract Type Should Be Used Rather Than address ✓Aligned Layer · Consensys · 1 Aug 2024Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="aligned"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us