Gunzilla security record
As of 23 Oct 2026, Gunzilla has 5 audit reports by 1 security firm on Trustblock; the latest is by Hacken, dated 9 Jul 2025. Those reports list no open critical findings. It also holds 2 deployed contracts on 2 chains.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits5
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Gunzilla / Deployment Verification Statement | Security firm: Hacken | Date: | Scope: 2 addresses on Avalanche and Solana | No open critical findings | Open · hacken.io |
| Gunzilla / Bridge | Security firm: Hacken | Date: | Scope: Files named in the report | No open critical findings | Open · hacken.io |
| Gunzilla / GUNZ | Security firm: Hacken | Date: | Scope: Files named in the report | No open critical findings | Open · hacken.io |
| Gunzilla / Payment Plan | Security firm: Hacken | Date: | Scope: Files named in the report | No open critical findings | Open · audits.hacken.io |
| Gunzilla / Vesting | Security firm: Hacken | Date: | Scope: Files named in the report | No open critical findings | Open · hacken.io |
Findings48
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 3 | 0 | 2 |
| Medium | 3 | 0 | 2 |
| Low | 23 | 0 | 15 |
HighIrreversible Token Freezing Due to blockedNonces Mechanism in Bridge ContractsGunzilla / Bridge · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportHighData ConsistencyGunzilla / Vesting · Hacken · 30 Apr 2023Open
The report gives no description here.
Open the reportHighUnverifiable LogicGunzilla / Vesting · Hacken · 30 Apr 2023Open
The report gives no description here.
Open the reportMediumUnchecked Guardian Approval Return ValueGunzilla / Bridge · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportMediumUnrestricted Minting by Admin May Bypass Bridge Logic and Cause Token ImbalanceGunzilla / GUNZ · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportMediumUnrestricted Withdrawal by Admin in WGUNBridge contractGunzilla / Bridge · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportLowCentralized External Guardian Controls May Lead to Lock of Token and Bridge FunctionalityGunzilla / Bridge · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportLowCentralized External Guardian Controls May Lead to Lock of Token and Bridge FunctionalityGunzilla / GUNZ · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportLowFloating PragmaGunzilla / Bridge · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportLowFloating PragmaGunzilla / GUNZ · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportShow 10 more
LowGas Limit Risk When Removing Supported Chains in WGUNBridge and GunzBridge contractsGunzilla / Bridge · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportLowHardcoded EIP-712 Name and Version in _computeDomainSeparatorGunzilla / Bridge · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportLowInconsistent and Redundant Chain Validation in Bridge ContractsGunzilla / Bridge · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportLowInconsistent Use of uint Without Explicit SizeGunzilla / Bridge · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportLowInefficient Signature Validation LogicGunzilla / Bridge · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportLowLack of Validation for Zero Address and Zero Amount in Bridging FunctionsGunzilla / Bridge · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportLowMissing _disableInitializers() in Upgradable Contract ConstructorGunzilla / Bridge · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportLowMissing _disableInitializers() in Upgradable Contract ConstructorGunzilla / GUNZ · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportLowMissing Non-Zero Address ValidationsGunzilla / Bridge · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportLowMissing nonReentrant Modifier in _nonblockingLzReceive FunctionGunzilla / Bridge · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportShow 9 more
LowNo Event on Key State UpdatesGunzilla / Bridge · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportLowpermit Function May Be Vulnerable to Signature Malleability via ecrecoverGunzilla / Bridge · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportLowsetBridgeFee Function May Cause Excessive Asset Loss Due to Missing Fee Cap and TimelockGunzilla / Bridge · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportLowUnused Custom Errors and State Variables in Bridge ContractsGunzilla / Bridge · Hacken · 31 Mar 2025Open
The report gives no description here.
Open the reportLowUse of transfer or send instead of call to send native assetsGunzilla / Payment Plan · Hacken · 7 Mar 2024Open
The report gives no description here.
Open the reportLowFunctions that Can Be Declared ExternalGunzilla / Vesting · Hacken · 30 Apr 2023Open
The report gives no description here.
Open the reportLowMissing Zero Address ValidationGunzilla / Vesting · Hacken · 30 Apr 2023Open
The report gives no description here.
Open the reportLowStyle Guide: Maximum Line LengthGunzilla / Vesting · Hacken · 30 Apr 2023Open
The report gives no description here.
Open the reportLowUse of Hard-Coded ValuesGunzilla / Vesting · Hacken · 30 Apr 2023Open
The report gives no description here.
Open the reportContracts2
| Address | Chain | Source code |
|---|---|---|
| 3jUf2RTyXp867piSB2dt8uUcNiLDW58asjGtXkRAkBbe | Chain: Solana | |
| 0x26debd39d5ed069770406fca10a0e4f8d2c743eb | Chain: Avalanche | Source code: Verified source |
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="gunzilla"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us