Nex Labs Cross Chain security record
As of 25 Oct 2026, Nex Labs Cross Chain has 3 audit reports by 1 security firm on Trustblock; the latest is by QuillAudits, dated 15 Jan 2025. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits3
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Nex Labs Stock Index | Security firm: QuillAudits | Date: | Scope: Files named in the report | No open critical findings | Open · quillaudits.com |
| Nex Labs DeFi Indices | Security firm: QuillAudits | Date: | Scope: Files named in the report | No open critical findings | Open · quillaudits.com |
| Nex Labs Cross Chain | Security firm: QuillAudits | Date: | Scope: Files named in the report | No open critical findings | Open · quillaudits.com |
Findings43
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 4 |
| Medium | 1 | 0 | 16 |
| Low | 1 | 0 | 21 |
MediumMissing whenNotPaused Modifier on critical entry pointsNex Labs Stock Index · QuillAudits · 15 Jan 2025Open
These contracts implement the pausable functionality that prevents users from calling important en try points in time of emergency. In the IndexFactory, the internal functions (_pause and _unpause) of the Pausable contract were appropriately invoked and the external functions had onlyOwner modifier. However, the implementation is incomplete as the “whenNotPaused” modifier was not attached to any critical functions. This implies that in time of emergency when the admin calls the pause function, the activity of the contract does not exactly pause. Users will proceed with their activity. Though there are no external/public functions present in other contracts where the PausableUpgradable contracts were inherited, the internal functions were not even called at all. This will form the bytecode of the contracts but never to be used. The contracts are:<br>-OrderManager<br>- IndexFactoryProcessor<br>
Open the reportLowUnused state variables and functionsNex Labs Stock Index · QuillAudits · 15 Jan 2025Open
There are some defined state variables that were never used in the smart contracts.<br>-Unused ActionInfo struct in IndexFactoryProcessor<br>-Unused orderInstanceById mapping in IndexFactoryBalancer<br>-Unused getOrderInstanceById function in IndexFactoryBalancer<br>There were also a couple of functions that had onlyFactory modifiers but none of these functions were called across other contracts<br>-setRedemptionTokenPrimaryBalance<br>-setRedemptionIndexTokenPrimaryTotalSupply<br>
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="nex-labs-cross-chain"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us