Axelar security record
As of 14 Oct 2026, Axelar has 9 audit reports by 1 security firm on Trustblock; the latest is by Ackee Blockchain Security, dated 18 Mar 2024. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Statuses are the security firms’ own. Trustblock does not review code.
Audits9
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Axelar Interchain Token Service | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded. See the report | 2 critical findings, fixed | Open · GitHub |
| Axelar Squid | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
| Axelar 3 | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
| Axelar 7 | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
| Axelar 6 | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
| Axelar Crosschain Dex | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
| Axelar 4 | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
| Axelar 2 | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
| Axelar | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
Findings144
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 0 | 8 |
| Medium | 10 | 8 | 13 |
| Low | 29 | 29 | 45 |
CriticalMint privilegeAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportCriticalThe executeWithToken function may be called by anyoneAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportHighexecuteWithToken allows to perform interchain operations even when the protocol is pausedAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportHighExpress receive double executionAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportHighTokens with callbacks can artificially increase cross-chain transfer amountAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportHighWrong variable passed to hookAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportHighfundAndRunMulticall is not pausableAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Fixed
The report gives no description here.
Open the reportHighIgnored return values on LocalAsset interfaceAxelar 6 · Ackee Blockchain Security · 25 Jul 2022Fixed
The report gives no description here.
Open the reportHighUnhandled return valueAxelar Crosschain Dex · Ackee Blockchain Security · 7 Jun 2022Fixed
The report gives no description here.
Open the reportHighAxelarGatewayMultisig .transferOperatorship emits an event with an incorrect valueAxelar 2 · Ackee Blockchain Security · 31 Mar 2022Fixed
The report gives no description here.
Open the reportShow 10 more
MediumERC-20 double approvalAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportMediumFront-running express execute with copy of gateway payloadAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportMediumGateway token check missingAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportMediumOperator slot incorrect preimageAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportMediumProposed role not cleared when acceptedAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportMediumtoAddress missing validationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportMediumTokens with callbacks can artificially increase cross-chain transfer amountAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportMediumMissing refundRecipient validationAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Fixed
The report gives no description here.
Open the reportMediumFloating dependency on AxelarGatewayAxelar 6 · Ackee Blockchain Security · 25 Jul 2022Fixed
The report gives no description here.
Open the reportMediumExternal calls lack existance checksAxelar 4 · Ackee Blockchain Security · 14 May 2022Fixed
The report gives no description here.
Open the reportShow 10 more
MediumToken symbol and address decouplingAxelar 4 · Ackee Blockchain Security · 14 May 2022Fixed
The report gives no description here.
Open the reportMediumToken symbol length validationAxelar 4 · Ackee Blockchain Security · 14 May 2022Fixed
The report gives no description here.
Open the reportMediumabi.encodePacked contains dynamic-length dataAxelar 2 · Ackee Blockchain Security · 31 Mar 2022Fixed
The report gives no description here.
Open the reportLow_executeWithToken redundant modifierAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowA danger of the interchain service's balance drainageAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowChain name validationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowCode duplicationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowexecuteWithToken and expressExecuteWithToken functions do not check for the correctness of payload argumentsAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowExpress receive functions can be called by recipientAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowexpressReceiveTokenWithData spoofed dataAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowHardcoded metadata version/prefixAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowIdentical function bodyAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowIInterchainTokenExecutable typoAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowIInterchainTokenService event parameter typoAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowIncorrect or missing documentationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowIncorrect parent contractAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowInterchainTokenServiceProxy unused constructor parameterAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowMisleading TokenManagerNotDeployed error nameAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowMissing documentationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowMissing documentationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowMissing symbol validationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowMissing validationsAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowMissing validationsAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowPREFIX_CANONICAL_TOKEN_ID typoAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowRedundant data validationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowReentrancy lock privateAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowrequiresApproval misleading valueAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowReturn of literal instead of enumAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowsendHash is not uniqueAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowStringToAddress library unusedAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowToken id can differ on the deployment methodAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowToken manager implementations order validationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowTypo in function parameter nameAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowUnused constantAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowUnused using-for directivesAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowZero amount transfers possibleAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportLowBytes length accessed in a for loop conditionAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Fixed
The report gives no description here.
Open the reportLowFor loop variable can be incremented in an unchecked blockAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Fixed
The report gives no description here.
Open the reportLowInconsistent behavior: Revert vs return defaultAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Fixed
The report gives no description here.
Open the reportLowInconsistent for loop incrementationAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Fixed
The report gives no description here.
Open the reportShow 8 more
LowMissing validation of the 0x prefix in string addressesAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Fixed
The report gives no description here.
Open the reportLowMultiple calls to pendingPauserAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Fixed
The report gives no description here.
Open the reportLowUnnecessary abi.encodePackedAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Fixed
The report gives no description here.
Open the reportLowMissing unit testsAxelar 6 · Ackee Blockchain Security · 25 Jul 2022Fixed
The report gives no description here.
Open the reportLowCode duplicationAxelar Crosschain Dex · Ackee Blockchain Security · 7 Jun 2022Fixed
The report gives no description here.
Open the reportLowRenounce ownershipAxelar Crosschain Dex · Ackee Blockchain Security · 7 Jun 2022Fixed
The report gives no description here.
Open the reportLowUnchecked transferAxelar Crosschain Dex · Ackee Blockchain Security · 7 Jun 2022Fixed
The report gives no description here.
Open the reportLowMisleading errorAxelar 4 · Ackee Blockchain Security · 14 May 2022Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="axelar"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us