LayerZero security record
As of 30 Oct 2026, LayerZero has 21 audit reports by 7 security firms on Trustblock; the latest is by Zellic, dated 19 May 2025. Those reports list no open critical findings. It also holds 4 deployed contracts on 1 chain.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits21
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| LayerZero TON OFT security assessment | Security firm: Zellic | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| LayerZero USDT TON security assessment | Security firm: Zellic | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| LayerZero security review | Security firm: Hexens | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Layerzero Zro Claim Contract security review | Security firm: Hexens | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| LayerZeroZROClaim security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded (see the report) | 2 critical findings, fixed | Open · GitHub |
| LayerZero security review | Security firm: Hexens | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Mintable OFT | Security firm: Paladin | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · IPFS |
| LayerZero security review | Security firm: Hexens | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| LayerZero security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| LayerZero DVN security assessment | Security firm: Zellic | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| OFT/OApp | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| Audit Report (MessageLib) | Security firm: Paladin | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · IPFS |
| LayerZero (V2) | Security firm: Paladin | Date: | Scope: 4 addresses on Ethereum | No open critical findings | Open · IPFS |
| Audit Report (Verifier Network) | Security firm: Paladin | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · IPFS |
| LayerZero OFT Wrapper Audit (January 19th 2023) se | Security firm: Zellic | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Layerzero Solidity Examples 2 | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Layerzero Solidity Examples | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Layerzero 2 | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| LayerZero | Security firm: Zokyo | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · IPFS |
| Layerzero | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Layerzero Prooflib | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
Findings133
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 2 | 9 |
| Medium | 13 | 11 | 9 |
| Low | 13 | 21 | 53 |
Marked Informational, Warning or Info by the firms. Not counted as findings.
WarningAccepting messages from untrusted remotesLayerzero Solidity Examples 2 · Ackee Blockchain Security · 21 Nov 2022Open
The report gives no description here.
Open the reportInfoConstants are lowercaseLayerzero Solidity Examples 2 · Ackee Blockchain Security · 21 Nov 2022Open
The report gives no description here.
Open the reportInfoFor-loop styleLayerzero Solidity Examples 2 · Ackee Blockchain Security · 21 Nov 2022Open
The report gives no description here.
Open the reportWarningUnexpected side effect of functionLayerzero Solidity Examples 2 · Ackee Blockchain Security · 21 Nov 2022Open
The report gives no description here.
Open the reportInfoUnnecessary function callLayerzero Solidity Examples 2 · Ackee Blockchain Security · 21 Nov 2022Open
The report gives no description here.
Open the reportInfoUnnecessary variables creationLayerzero Solidity Examples 2 · Ackee Blockchain Security · 21 Nov 2022Open
The report gives no description here.
Open the reportWarningUsage of solc optimizerLayerzero Solidity Examples 2 · Ackee Blockchain Security · 21 Nov 2022Open
The report gives no description here.
Open the reportInfoBad coding practicesLayerzero Solidity Examples · Ackee Blockchain Security · 27 Jul 2022Open
The report gives no description here.
Open the reportWarningFloating pragmaLayerzero Solidity Examples · Ackee Blockchain Security · 27 Jul 2022Open
The report gives no description here.
Open the reportInfoGas optimization in mint functionLayerzero Solidity Examples · Ackee Blockchain Security · 27 Jul 2022Open
The report gives no description here.
Open the reportShow 10 more
WarningLack of cross-chain token ID validationLayerzero Solidity Examples · Ackee Blockchain Security · 27 Jul 2022Open
The report gives no description here.
Open the reportWarningLack of existence checkLayerzero Solidity Examples · Ackee Blockchain Security · 27 Jul 2022Open
The report gives no description here.
Open the reportWarningMint without price requireLayerzero Solidity Examples · Ackee Blockchain Security · 27 Jul 2022Open
The report gives no description here.
Open the reportWarningOrder of event emission and reentrancyLayerzero Solidity Examples · Ackee Blockchain Security · 27 Jul 2022Open
The report gives no description here.
Open the reportInfoUnused SafeERC20Layerzero Solidity Examples · Ackee Blockchain Security · 27 Jul 2022Open
The report gives no description here.
Open the reportWarningUsage of solc optimizerLayerzero Solidity Examples · Ackee Blockchain Security · 27 Jul 2022Open
The report gives no description here.
Open the reportWarningLow test coverageLayerzero 2 · Ackee Blockchain Security · 11 May 2022Open
The report gives no description here.
Open the reportInformationalCap check optimization for gas efficiency in _debitFrom functionLayerZero security review · Hexens · 17 Sep 2024Acknowledged
The report gives no description here.
Open the reportInformationalAdding batch rate limit setting functionality to OFTEfficientRateLimitLayerZero security review · Hexens · 23 May 2024Acknowledged
The report gives no description here.
Open the reportInformationalMissing access control in mint functionLayerZero security review · Hexens · 23 May 2024Acknowledged
The report gives no description here.
Open the reportShow 10 more
WarningERC721, ERC1155 reentrancyLayerzero 2 · Ackee Blockchain Security · 11 May 2022Acknowledged
The report gives no description here.
Open the reportInfoMissing documentationLayerzero 2 · Ackee Blockchain Security · 11 May 2022Acknowledged
The report gives no description here.
Open the reportInfoMissing zero length handlingLayerzero 2 · Ackee Blockchain Security · 11 May 2022Acknowledged
The report gives no description here.
Open the reportInfoPublic functions can be externalLayerzero 2 · Ackee Blockchain Security · 11 May 2022Acknowledged
The report gives no description here.
Open the reportWarningUnintended feature - Renounce ownershipLayerzero 2 · Ackee Blockchain Security · 11 May 2022Acknowledged
The report gives no description here.
Open the reportInfoConstant namingLayerzero · Ackee Blockchain Security · 15 Mar 2022Acknowledged
The report gives no description here.
Open the reportInfoEVMValidator is not a libraryLayerzero · Ackee Blockchain Security · 15 Mar 2022Acknowledged
The report gives no description here.
Open the reportWarningIncorrect use of SafeMath libraryLayerzero · Ackee Blockchain Security · 15 Mar 2022Acknowledged
The report gives no description here.
Open the reportWarningMany different compiler versionsLayerzero · Ackee Blockchain Security · 15 Mar 2022Acknowledged
The report gives no description here.
Open the reportWarningOutdated compilerLayerzero · Ackee Blockchain Security · 15 Mar 2022Acknowledged
The report gives no description here.
Open the reportShow 10 more
WarningUnintended feature - Renounce ownershipLayerzero · Ackee Blockchain Security · 15 Mar 2022Acknowledged
The report gives no description here.
Open the reportWarningUsage of third party libsLayerzero · Ackee Blockchain Security · 15 Mar 2022Acknowledged
The report gives no description here.
Open the reportWarningOutdated compilerLayerzero Prooflib · Ackee Blockchain Security · 11 Mar 2022Acknowledged
The report gives no description here.
Open the reportWarningUsage of third party librariesLayerzero Prooflib · Ackee Blockchain Security · 11 Mar 2022Acknowledged
The report gives no description here.
Open the reportInformationalInconsistent use of _msgSender() and msg.senderLayerZero security review · Hexens · 17 Sep 2024Fixed
The report gives no description here.
Open the reportInformationalRedundant balance check in withdrawLayerZero security review · Hexens · 17 Sep 2024Fixed
The report gives no description here.
Open the reportInformationalRedundant mint in _debitMsgSenderLayerZero security review · Hexens · 17 Sep 2024Fixed
The report gives no description here.
Open the reportInformationalUse unchecked when it is safeLayerZero security review · Hexens · 17 Sep 2024Fixed
The report gives no description here.
Open the reportInformationalRisk of user error when stargateNative is not setLayerzero Zro Claim Contract security review · Hexens · 18 Jun 2024Fixed
The report gives no description here.
Open the reportInformationalConsider burning OFT tokens instead of transferring them when sending tokens cross-chainLayerZero security review · Hexens · 7 Jun 2024Fixed
The report gives no description here.
Open the reportShow 10 more
InformationalUse custom errorsLayerZero security review · Hexens · 7 Jun 2024Fixed
The report gives no description here.
Open the reportInformationalRefactoring decay calculation logic in EfficientRateLimiterLayerZero security review · Hexens · 23 May 2024Fixed
The report gives no description here.
Open the reportInformationalInconsistent Solidity Compiler Version in IOAppReceiverOFT/OApp · ChainSecurity · 30 Jan 2024Fixed
The report gives no description here.
Open the reportWarningLack of events in state changing functionsLayerzero Solidity Examples · Ackee Blockchain Security · 27 Jul 2022Fixed
The report gives no description here.
Open the reportWarningCode duplicationLayerzero 2 · Ackee Blockchain Security · 11 May 2022Fixed
The report gives no description here.
Open the reportInfoHardcoded typesLayerzero 2 · Ackee Blockchain Security · 11 May 2022Fixed
The report gives no description here.
Open the reportInfoMissing require messageLayerzero 2 · Ackee Blockchain Security · 11 May 2022Fixed
The report gives no description here.
Open the reportWarningUnresolved TODOLayerzero 2 · Ackee Blockchain Security · 11 May 2022Fixed
The report gives no description here.
Open the reportInfoFunctions namingLayerzero · Ackee Blockchain Security · 15 Mar 2022Fixed
The report gives no description here.
Open the reportInfoCommented out codeLayerzero Prooflib · Ackee Blockchain Security · 11 Mar 2022Fixed
The report gives no description here.
Open the reportContracts4
| Address | Chain | Source code |
|---|---|---|
| 0xef02bacd67c0ab45510927749009f6b9ffce0631 | Chain: Ethereum | Source code: Verified source |
| 0x148f693af10ddfae81cddb36f4c93b31a90076e1 | Chain: Ethereum | Source code: Verified source |
| 0xd07c30af3ff30d96bdc9c6044958230eb797ddbf | Chain: Ethereum | Source code: Verified source |
| 0x1a44076050125825900e736c501f859c50fe728c | Chain: Ethereum | Source code: Verified source |
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="layerzero"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us