Axelar security record
As of 8 Nov 2026, Axelar has 9 audit reports by 1 security firm on Trustblock; the latest is by Ackee Blockchain Security, dated 18 Mar 2024. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.
Audits9
Newest first
| Report | Security firm | Date | Scope | Critical findings | Source |
|---|---|---|---|---|---|
| Axelar Interchain Token Service | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded; see the report | 2 critical findings, fixed | GitHub ↗ |
| Axelar Squid | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Axelar 3 | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Axelar 7 | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Axelar 6 | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Axelar Crosschain Dex | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Axelar 4 | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Axelar 2 | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Axelar | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
Findings144
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 0 | 8 |
| Medium | 10 | 8 | 13 |
| Low | 0 | 2 | 6 |
Marked Warning or Info by the firms. Not counted as findings.
InfoAmbiguous revert messageAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Open
The report gives no description here.
Open the reportWarningCode-comment discrepancyAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Open
The report gives no description here.
Open the reportInfoIncorrect inline documentationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Open
The report gives no description here.
Open the reportInfoInterchainToken revert if max approval givenAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Open
The report gives no description here.
Open the reportWarningLack of contract prefixes in slot preimagesAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Open
The report gives no description here.
Open the reportWarningLack of eventsAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Open
The report gives no description here.
Open the reportWarningLinkerRouter initial trusted parameters cannot be setAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Open
The report gives no description here.
Open the reportInfoLinkerRouter remote addresses normalizationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Open
The report gives no description here.
Open the reportWarningManager implementation zero address checkAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Open
The report gives no description here.
Open the reportWarningPossible code injection on deployment on remoteAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Open
The report gives no description here.
Open the reportShow 10 more
InfoToken manager send function namesAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Open
The report gives no description here.
Open the reportInfoUnused functions and variablesAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Open
The report gives no description here.
Open the reportWarningIntegrator specific fee cannot be zeroAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Open
The report gives no description here.
Open the reportWarningIntegrator specific fee validationAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Open
The report gives no description here.
Open the reportWarningMaximum integrator fee check can be bypassedAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Open
The report gives no description here.
Open the reportInfoConfusing naming of errorsAxelar 7 · Ackee Blockchain Security · 27 Jul 2022Open
The report gives no description here.
Open the reportWarningHigh privileged owner and single point of failureAxelar 7 · Ackee Blockchain Security · 27 Jul 2022Open
The report gives no description here.
Open the reportWarningPitfalls of upgradeabilityAxelar 7 · Ackee Blockchain Security · 27 Jul 2022Open
The report gives no description here.
Open the reportInfoPublic functions without internal callsAxelar 7 · Ackee Blockchain Security · 27 Jul 2022Open
The report gives no description here.
Open the reportWarningStealing tokens from Deposit ProxyAxelar 7 · Ackee Blockchain Security · 27 Jul 2022Open
The report gives no description here.
Open the reportShow 10 more
WarningUsage of solc optimizerAxelar 7 · Ackee Blockchain Security · 27 Jul 2022Open
The report gives no description here.
Open the reportInfoMissing eventsAxelar 6 · Ackee Blockchain Security · 25 Jul 2022Open
The report gives no description here.
Open the reportInfoTypo in the variable nameAxelar 6 · Ackee Blockchain Security · 25 Jul 2022Open
The report gives no description here.
Open the reportWarningUsage of solc optimizerAxelar 6 · Ackee Blockchain Security · 25 Jul 2022Open
The report gives no description here.
Open the reportWarningEvent data validationAxelar 4 · Ackee Blockchain Security · 14 May 2022Open
The report gives no description here.
Open the reportWarningUsage of solc optimizerAxelar 4 · Ackee Blockchain Security · 14 May 2022Open
The report gives no description here.
Open the reportWarningAxelarGatewayMultisig ignores epoch 0Axelar 2 · Ackee Blockchain Security · 31 Mar 2022Open
The report gives no description here.
Open the reportWarningCannot use multiple tokens with same symbolAxelar 2 · Ackee Blockchain Security · 31 Mar 2022Open
The report gives no description here.
Open the reportInfoMany operations don't emit eventsAxelar 2 · Ackee Blockchain Security · 31 Mar 2022Open
The report gives no description here.
Open the reportWarningCanonical lock/unlock fee-on-transfer tokensAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Acknowledged
The report gives no description here.
Open the reportShow 10 more
WarningChain name data validationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Acknowledged
The report gives no description here.
Open the reportWarningChange in the enum order can affect access controlsAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Acknowledged
The report gives no description here.
Open the reportWarningDifferent decimals not handledAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Acknowledged
The report gives no description here.
Open the reportWarningDuplicated codeAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Acknowledged
The report gives no description here.
Open the reportWarningDuplicated codeAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Acknowledged
The report gives no description here.
Open the reportInfoInconsistent code styleAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Acknowledged
The report gives no description here.
Open the reportInfoInterchainToken has code unrelated to the token logicAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Acknowledged
The report gives no description here.
Open the reportWarningMalicious token registrationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Acknowledged
The report gives no description here.
Open the reportWarningOne-step role transferAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Acknowledged
The report gives no description here.
Open the reportWarningPrefix incorrectly calculatedAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Acknowledged
The report gives no description here.
Open the reportShow 10 more
WarningUnused internal functionsAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Acknowledged
The report gives no description here.
Open the reportWarningUsage of solc optimizerAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Acknowledged
The report gives no description here.
Open the reportInfoUse type(uint256).max for infinite flow limitAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Acknowledged
The report gives no description here.
Open the reportInfoAddress code length can be checked before a callAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Acknowledged
The report gives no description here.
Open the reportWarningAddress helper functions not respecting EIP-55Axelar Squid · Ackee Blockchain Security · 19 Oct 2022Acknowledged
The report gives no description here.
Open the reportInfoMissing NatSpec documentationAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Acknowledged
The report gives no description here.
Open the reportWarningSquidRouter pausable can be bypassedAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Acknowledged
The report gives no description here.
Open the reportWarningUse of solc optimizerAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Acknowledged
The report gives no description here.
Open the reportWarningPitfalls of upgradeabilityAxelar 6 · Ackee Blockchain Security · 25 Jul 2022Acknowledged
The report gives no description here.
Open the reportWarningThe owner can change arbitrarily operatorship and potentially cause DoSAxelar 6 · Ackee Blockchain Security · 25 Jul 2022Acknowledged
The report gives no description here.
Open the reportShow 10 more
WarningXC20Wrapper owner has escalated priviligesAxelar 6 · Ackee Blockchain Security · 25 Jul 2022Acknowledged
The report gives no description here.
Open the reportInfoCommented out codeAxelar Crosschain Dex · Ackee Blockchain Security · 7 Jun 2022Acknowledged
The report gives no description here.
Open the reportWarningExternal mint functionAxelar Crosschain Dex · Ackee Blockchain Security · 7 Jun 2022Acknowledged
The report gives no description here.
Open the reportInfoMissing code documentationAxelar Crosschain Dex · Ackee Blockchain Security · 7 Jun 2022Acknowledged
The report gives no description here.
Open the reportWarningMissing unit testsAxelar Crosschain Dex · Ackee Blockchain Security · 7 Jun 2022Acknowledged
The report gives no description here.
Open the reportInfoState variable accessAxelar Crosschain Dex · Ackee Blockchain Security · 7 Jun 2022Acknowledged
The report gives no description here.
Open the reportInfo_executeWithToken redundant modifierAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportWarningA danger of the interchain service's balance drainageAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportInfoCode duplicationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportWarningexecuteWithToken and expressExecuteWithToken functions do not check for the correctness of payload argumentsAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportShow 10 more
WarningExpress receive functions can be called by recipientAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportWarningHardcoded metadata version/prefixAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportWarningIdentical function bodyAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportWarningIInterchainTokenExecutable typoAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportInfoIInterchainTokenService event parameter typoAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportInfoIncorrect or missing documentationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportWarningIncorrect parent contractAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportInfoInterchainTokenServiceProxy unused constructor parameterAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportWarningMisleading TokenManagerNotDeployed error nameAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportInfoMissing documentationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportShow 10 more
InfoMissing documentationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportWarningMissing symbol validationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportWarningPREFIX_CANONICAL_TOKEN_ID typoAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportInfoRedundant data validationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportInfoReentrancy lock privateAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportWarningrequiresApproval misleading valueAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportWarningReturn of literal instead of enumAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportInfoStringToAddress library unusedAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportWarningToken id can differ on the deployment methodAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportWarningToken manager implementations order validationAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportShow 10 more
InfoTypo in function parameter nameAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportInfoUnused constantAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportInfoUnused using-for directivesAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportWarningZero amount transfers possibleAxelar Interchain Token Service · Ackee Blockchain Security · 18 Mar 2024Fixed
The report gives no description here.
Open the reportInfoBytes length accessed in a for loop conditionAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Fixed
The report gives no description here.
Open the reportInfoFor loop variable can be incremented in an unchecked blockAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Fixed
The report gives no description here.
Open the reportInfoInconsistent behavior: Revert vs return defaultAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Fixed
The report gives no description here.
Open the reportInfoInconsistent for loop incrementationAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Fixed
The report gives no description here.
Open the reportWarningMissing validation of the 0x prefix in string addressesAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Fixed
The report gives no description here.
Open the reportInfoMultiple calls to pendingPauserAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Fixed
The report gives no description here.
Open the reportShow 5 more
InfoUnnecessary abi.encodePackedAxelar Squid · Ackee Blockchain Security · 19 Oct 2022Fixed
The report gives no description here.
Open the reportWarningMissing unit testsAxelar 6 · Ackee Blockchain Security · 25 Jul 2022Fixed
The report gives no description here.
Open the reportWarningCode duplicationAxelar Crosschain Dex · Ackee Blockchain Security · 7 Jun 2022Fixed
The report gives no description here.
Open the reportWarningRenounce ownershipAxelar Crosschain Dex · Ackee Blockchain Security · 7 Jun 2022Fixed
The report gives no description here.
Open the reportWarningMisleading errorAxelar 4 · Ackee Blockchain Security · 14 May 2022Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="axelar"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us