Stargate security record
As of 14 Oct 2026, Stargate has 8 audit reports by 3 security firms on Trustblock; the latest is by Paladin, dated 10 Sep 2023. Those reports list no open critical findings. It also holds 3 deployed contracts on 1 chain.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits8
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Audit Report (Stargate V2 Fee Claimer) | Security firm: Paladin | Date: | Scope: 1 address on Ethereum | No open critical findings | Open · IPFS |
| Audit Report (sveSTG) | Security firm: Paladin | Date: | Scope: 1 address on Ethereum | No open critical findings | Open · IPFS |
| Audit Report (AASTGClaim) | Security firm: Paladin | Date: | Scope: 1 address on Ethereum | No open critical findings | Open · IPFS |
| Layer Zero 4 | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
| Layerzero Stargate 2 | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
| Layerzero 3 | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
| Layerzero Stargate | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
| LayerZero Stargate security assessment | Security firm: Zellic | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
Findings31
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 2 |
| Medium | 0 | 2 | 4 |
| Low | 0 | 10 | 13 |
HighAll contract functionality is presently broken due to a reentrancy guard gridlock reverting every single callAudit Report (AASTGClaim) · Paladin · 9 Mar 2023Fixed
The report gives no description here.
Open the reportHighPossible cross-chain desynchronization of token balancesLayerZero Stargate security assessment · Zellic · 6 Mar 2022Fixed
The report gives no description here.
Open the reportMediumContract grants excessive balance before Fri Mar 17 2023Audit Report (sveSTG) · Paladin · 9 Mar 2023Fixed
The report gives no description here.
Open the reportMediumtotalSupply() represents the underlying balance sum instead of the sum of balanceOf()Audit Report (sveSTG) · Paladin · 9 Mar 2023Fixed
The report gives no description here.
Open the reportMediumUnchecked transferLayer Zero 4 · Ackee Blockchain Security · 14 Jul 2022Fixed
The report gives no description here.
Open the reportMediumUnchecked castLayerzero Stargate 2 · Ackee Blockchain Security · 8 Jul 2022Fixed
The report gives no description here.
Open the reportLowAdditional validation can reduce the state-space for the contract making it more theoretically secureAudit Report (Stargate V2 Fee Claimer) · Paladin · 10 Sep 2023Fixed
The report gives no description here.
Open the reportLowAllowing anyone to claim on behalf for other users might be annoyingAudit Report (Stargate V2 Fee Claimer) · Paladin · 10 Sep 2023Fixed
The report gives no description here.
Open the reportLowContract is incompatible with multi-address tokens like TUSDAudit Report (Stargate V2 Fee Claimer) · Paladin · 10 Sep 2023Fixed
The report gives no description here.
Open the reportLowDistribution to weeks where no one is supplying to the VE token is completely unclaimableAudit Report (Stargate V2 Fee Claimer) · Paladin · 10 Sep 2023Fixed
The report gives no description here.
Open the reportShow 9 more
LowGas griefing: User claims can be made more expensive if a malicious party calls claimToken or claimTokens on their behalf before they have any VE balanceAudit Report (Stargate V2 Fee Claimer) · Paladin · 10 Sep 2023Fixed
The report gives no description here.
Open the reportLowGas optimizationsAudit Report (Stargate V2 Fee Claimer) · Paladin · 10 Sep 2023Fixed
The report gives no description here.
Open the reportLowThe uint keyword should not be usedAudit Report (Stargate V2 Fee Claimer) · Paladin · 10 Sep 2023Fixed
The report gives no description here.
Open the reportLowTypographical issuesAudit Report (Stargate V2 Fee Claimer) · Paladin · 10 Sep 2023Fixed
The report gives no description here.
Open the reportLowForking ERC20 is unnecessaryAudit Report (sveSTG) · Paladin · 9 Mar 2023Fixed
The report gives no description here.
Open the reportLowTypographical errorsAudit Report (sveSTG) · Paladin · 9 Mar 2023Fixed
The report gives no description here.
Open the reportLowInsufficient data validation in RouterETHLayerzero 3 · Ackee Blockchain Security · 22 Jun 2022Fixed
The report gives no description here.
Open the reportLowMissing test suite code coverageLayerZero Stargate security assessment · Zellic · 6 Mar 2022Fixed
The report gives no description here.
Open the reportLowUsage of calldatacopy in inline assembly is unclearLayerZero Stargate security assessment · Zellic · 6 Mar 2022Fixed
The report gives no description here.
Open the reportContracts3
| Address | Chain | Source code |
|---|---|---|
| 0xd56e00a493ed90c490a54cf58cc5a713556bfdbb | Chain: Ethereum | Source code: Verified source |
| 0xaf667811a7edcd5b0066cd4ca0da51637db76d09 | Chain: Ethereum | Source code: Verified source |
| 0x879ca077b05579fa68aab2827bed21f5f50eacbb | Chain: Ethereum | Source code: Verified source |
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="stargate-v2"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us