Push Chain security record

Ethereum, Polygon (POS)push.org

As of 2 Oct 2026, Trustblock’s record for Push Chain holds 3 audit reports by 1 audit firm (Apr 2026 to Aug 2026). The latest audit is “Push Chain / EVM Gateway” by Hacken, dated 4 Aug 2026. Those reports list no open critical findings.

Critical findings

No open critical findings

Across 3 reports.

Open the latest report Get the label for your site

Record last updated 2 Oct 2026. It holds audits, findings and contracts up to Oct 2026, and incidents up to Sep 2026. Statuses are the audit firms’ own. Trustblock does not review code.

Audits: 3; by 1 firm, Apr 2026 to Aug 2026
Last audit: 4 Aug 2026; by Hacken
Audit firms: 1; Hacken

Issues (106)

	Low	Medium	High	Critical	Total
Not fixed	10	2	-	-	12
Acknowledged	11	3	-	-	14
Fixed	65	12	3	-	80
Total	86	17	3	0	106

Audits (3)

#	Name	Auditor	Date	Chains	Issues
1	Push Chain / EVM Gateway	Hacken	2026/08/04	Multi-Chain	No open critical findings
2	Push Chain / SVM Gateway	Hacken	2026/04/24	Multi-Chain	No open critical findings
3	Push Chain / Core Contracts	Hacken	2026/04/13	Multi-Chain	No open critical findings

Contracts (139)

#	File Name
1	deposit.rs
2	transfers.rs
3	state.rs
4	errors.rs
5	lib.rs
6	rescue.rs
7	pricing.rs
8	validation.rs
9	revert.rs
10	admin.rs

Get your label

Is this your project? Add a free label to your website. It shows the audits published on Trustblock, with the latest firm and date, and links to this page. It updates by itself.

HTML

<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
<div
  data-tb-project-widget
  data-tb-project-slug="push-protocol"
  data-tb-variant="label"
  data-tb-color="light"
></div>

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us

#	File Name
1	deposit.rs
2	transfers.rs
3	state.rs
4	errors.rs
5	lib.rs
6	rescue.rs
7	pricing.rs
8	validation.rs
9	revert.rs
10	admin.rs

Push Chain security record

Issues (106)

updateEpochDuration Implicitly Resets Rate-Limit Usage for All Tokensnot_fixed/medium

Admin Front-Run Risk on Protocol Fee Updatesnot_fixed/low

setVault Migration Can Orphan Previously Locked ERC20 Funds in the Old Vaultnot_fixed/low

Users Have No Control Over Swap Parameters in Outbound Gas-Fee Conversionnot_fixed/low

Wrong Gas Fee Reimbursement Source In finalize_universal_tx Breaks The 1:1 Backing Invariantnot_fixed/medium

Audits (3)

Contracts (139)

Get your label

Audits (3)