Security Audit Report for Puffer's Puffer-Protocol v2

Puffer-Protocol v2 is a cross-chain restaking and attestation integration that connects Puffer validator operations with Automata-verified TEE sessions. The audit scope covers two main layers of code. The first is the Puffer contract layer, which handles validator registration and provisioning, Guardian enclave key rotation, withdrawal batch processing, Validator Ticket accounting, reward distribution, and L1/L2 reward bridging . The second layer is the Automata TEE workload measurement layer, which verifies TDX/SNP reports, TPM quotes, AK and session-key delegation, base image and workload policies, PCR constraints, and session lifecycle operations consumed by Puffer’s Guardian trust path. Specifically, for code in puffer-contracts-updates-private, the audit focuses on the codes located in the following directories/files: l2-contracts/src mainnet-contracts/src For code in automata-tee-workload-measurement, the audit focuses on the codes located in the following directories/files: src/SessionRegistry.sol src/BaseImageRegistry.sol src/WorkloadRegistry.sol src/TeeVerifier.sol src/SignatureVerifier.sol src/KeyResolver.sol Other files are not within the scope of the audit. Additionally, all dependencies of the Target are considered reliable in terms of both functionality and security, and are therefore not included in the audit scope.

Security Audit Report for Pharos Labs's Prosper Contracts

Prosper Contract is an on-chain launch protocol designed to integrate external R25 Vaults with dedicated pToken campaigns. For each integrated Vault, the protocol creates and manages an independent campaign that begins with an internal launch and continues through liquidity migration to an external market. After the migration, the protocol supports reward claims and uses collected channel fees to conduct pToken buybacks. This structure provides each R25 Vault with an isolated campaign lifecycle while using a shared framework for token launches, liquidity migration, reward distribution, and fee-funded buybacks. Compared to Version 1 (68c547), Version 2 (b8ef7f) introduces asynchronous R25 deposit requests with user cancellation, canonical pair protection, and time-locked LP positions instead of permanent LP burning. It also extends failed-campaign handling by burning reserved tokens and converting accrued fees into R25 Vault Shares that users can reclaim through a Merkle-based mechanism without an expiration period or administrative sweep.

Security Audit Report for PopDEX's Dex Topup

Dex Topup provides deterministic, permissionless deposit addresses for bridging ERC20 tokens through the official TokenBridge. Each user’s proxy address can be precomputed before deployment, allowing tokens to be sent there in advance. Once funded, anyone can call the factory contract to deploy the proxy and forward the tokens to the TokenBridge, with the receiver fixed to the original user. The module acts only as a lightweight forwarding layer and does not maintain balances or custody funds long term.

Security Audit Report for Rhea Finance's Agg-Oracle

The reviewed update extends the protocol’s oracle infrastructure by integrating Atlas and Outlayer as dedicated price-data sources. The changes introduce source-specific payload decoding and validation, signature verification, authorized-signer configuration, price normalization, price-reporting interfaces, and token-to-feed mappings. The contract’s storage layout and migration procedures have also been updated to accommodate the new signerrelated state while maintaining compatibility with previously stored oracle data.

Security Audit Report for DeAgentAI's multisig-timelock-contracts

The multisig-timelock-contracts is a token vault deployed on BSC and Sui. It implements a weighted multisig scheme based on off-chain signatures, combined with a conditional timelock. Each owner holds a weight, and an operation is authorized once the combined weight of the signers reaches a fixed threshold. The timelock delay applies only when at least one participating signer is flagged as timelocked. Both chains share identical high-level logic, differing solely in the signature primitive: EIP712 with ECDSA on BSC and Ed25519 on Sui. The configured owners are A (weight 2, timelocked), B (weight 1, and C (weight 1, with a threshold of 2. Accordingly, A alone requires the delay, B and C together may execute immediately, and B or C alone is rejected. The only governed operation is transferring whitelisted tokens out of the vault, and all configuration is fixed at deployment and immutable.

Security Audit Report for BitgetWallet's solver

This project implements a Fusion-style resolver for settling 1inch Limit Order Protocol orders. During settlement, the resolver receives the maker asset, swaps it through an external aggregator into the taker asset, and allows the Limit Order Protocol to complete payment to the maker or receiver. The contract also includes executor access control, pause controls, token sweeping to configured vaults, and native ETH handling for WETH unwrap flows. Its safety model depends on trusted executors, trusted protocol dependencies, and off-chain validation of swap routes and profitability.

Security Audit Report for Olaxbt's agent-contract

This project implements a fixed-supply ERC20 token contract with admin-controlled account freezing and a two-step admin transfer mechanism. The total supply is minted once to a vesting address at deployment, while freeze controls restrict token transfers involving blocked accounts.

Security Audit Report for Puffer's puffer-institutional

Unless explicitly specified, the security of the language itself (e.g., the solidity language), the underlying compiling toolchain and the computing infrastructure are out of the scope.

Security Audit Report for Inverter Network's EMUSD Contracts

EMUSD Contracts of Inverter Network introduces the token EmAssetToken, which serves as the issuance token for their RWA tokenization and settlement system. Specifically, the token EmAssetToken can be minted and burned by the contract OrderManager when handling buy and redeem orders. Additionally, some minor changes have been made to the order manager module and related proxy contracts to support the corresponding adaption.

Security Audit Report for Atoshi's atoshi-privacy-sdk

1. Unless explicitly specified, the security of the language itself (e.g., the solidity language), the underlying compiling toolchain and the computing infrastructure are out of the scope.

Security Audit Report for Bitget's rwa-evm

The rwa-evm project refines token initialization and corporate action handling. Newly created RWA tokens can now be launched with a caller-specified starting rebase index rather than a fixed default, allowing a token to open already aligned with a share ratio inherited from offchain records or an earlier deployment. The starting index is bounded and recorded on creation. Rebases are restricted to when the token is paused, so transfers cannot interleave with an index update. A factory may also be deployed against an existing upgrade beacon, so that tokens it creates share the implementation and upgrade authority of earlier token deployments.

Security Audit Report for Atoshi's atoshi-privacy-contracts

1. Unless explicitly specified, the security of the language itself (e.g., the solidity language), the underlying compiling toolchain and the computing infrastructure are out of the scope.

Security Audit Report for Rhea Finance's xRHEA Token

This incremental audit reviews the xRHEA staking contract upgrade, which introduces time locked unstake requests, configurable exit fees, fee distribution and retry mechanisms, and quota controlled instant unstaking for approved accounts. The audit further covers high precision virtual pricing, state migration, asynchronous NEP-141 callback handling, reward accounting, storage management, and the integration of the upgraded unstake workflow with the existing withdrawal implementation.

Security Audit Report for Atoshi's atoshi-privacy-circuits

The atoshi-privacy-circuits project is a Circom/Groth16 zero-knowledge circuit system for shielded transactions. It contains three core circuits. Shield creates private note commitments for deposits. Unshield proves note ownership and enables withdrawals with nullifierbased double-spend protection. Transfer spends an existing note and creates a new note while preserving asset consistency.

Security Audit Report for DCS Protocol's Merchant Factory Contracts

Merchant Factory Contracts of DCS Protocol is a stablecoin acquiring infrastructure that enables recurring, operator-driven pull payments, deterministic per-merchant payout routing, and allowlisted fee distribution. The contract MerchantFactory serves as the single entrypoint for charge authorization, fee validation, and on-demand proxy deployment. The contract MerchantContract is a singleton implementation, and the factory deploys a minimal-proxy clone of it for each merchant and token, which pulls funds directly from the payer to the merchant destination and the fee receiver within the same transaction.

Security Audit Report for AllScale's EIP7702 Contracts

EIP7702 Contracts of AllScale is a gasless wallet infrastructure built on EIP7702 account delegation. It lets whitelisted sponsors relay signed EIP712 authorizations on behalf of EOAs, executing fee-split token transfers and deposits. All wallet logic runs through a three-layer beacon proxy pattern, enabling seamless logic upgrades without changing the delegated contract. Specifically, EOAs delegate to the contract BeaconStub, which resolves the active implementation (i.e., thecontract EIP7702 froman upgradeable beaconcontract. Then, the contract BeaconStub delegatecalls into the implementation to execute transfers.

Security Audit Report for AX Coin Bahrain B.S.C (C)'s axcoin-evm-contracts

S.C (C). The PoRGatedMinter is a permissioned mint gate for the existing Fireblocks ERC20 stablecoin, AXUSD, that routes issuance through the multisig Operations vault. Each mint must come from an approved mint requester and pass a fresh proof-of-reserve check, a request deduplication check, and an optional per-call mint limit before AXUSD can be issued.

Security Audit Report for Inverter Network's Router Contracts

Router Contracts of Inverter Network facilitate minting and redemption of iTRY tokens against a configured collateral token (e.g., USDC) via two distinct settlement pathways. Direct routes allow backend approved executors to submit payer-signed EIP-712 intents, while solver settlement routes enable allowlisted solvers to execute intents via backend-signed authorizations. The project also implements a vault (i.e., InstantRedeemPayoutVault) to release collaterals for instant and solver redeems with rolling bucket and window rate limits.

Security Audit Report for Mantle's mStocks Protocol

1. Unless explicitly specified, the security of the language itself (e.g., the solidity language), the underlying compiling toolchain and the computing infrastructure are out of the scope.

Security Audit Report for bitgetwallet's Reward Distribute Platform

Reward Distribute Platform is a Solidity-based campaign reward vault. It lets creators create reward campaigns, sponsors deposit ERC20 budgets, publishers release per-epoch Merkle roots, and users claim cumulative rewards with Merkle proofs. The contract tracks committed, claimed, and locked funds per campaign/token, supports cancellation and sponsor refunds, and includes owner/operator governance for role updates, pausing, ERC20/ETH rescue, and emergency campaign sponsor-fund recovery. The design relies on off-chain Merkle generation and privileged roles, especially the publisher and operator, for correct reward distribution and incident handling.

Security Audit Report for Bitget's Dispatcher Contracts

The Dispatcher Contracts of Bitget is a payment infrastructure, which serves for two business flows: Checkout payments and Business call dispatch. Specifically, checkout payments pull a user’s tokens, and distribute them to payout recipients within optional swaps through an allowlisted aggregator. As for business call dispatch, it pulls the user’s funds and executes users’ intended calls. It is worth noting that the whitelist for calls targets is per business type and can be circumvented by the owner via the unrestricted flag.

Security Audit Report for Mantle's Fiat24 Contracts

The Fiat24 Contracts of Mantle is a fiat-crypto payment infrastructure on Mantle that enables card authorization processing and operator-controlled vault management for fiat token operations. This update introduces a unified fee configuration module via the contract Fiat24FeeManager, cross-chain deposit paths on the Arbitrum and Tempo chains via LayerZero, a delegation vault extension for partner-managed payouts in the contract DelegationVault, and batch double-booking transfers in the contract Fiat24CardAuthorizationMarqeta.

Security Audit Report for HertzFlow's Perp Contracts

1. Unless explicitly specified, the security of the language itself (e.g., the solidity language), the underlying compiling toolchain and the computing infrastructure are out of the scope.

Security Audit Report for KEYRING's multisig-wallet-contracts

This project implements a permissionless multisig wallet system. A factory deploys deterministic minimal-proxy wallets for users and stores each wallet’s signer set and approval threshold. Wallets can receive native tokens, ERC20, ERC721, and ERC1155 assets, and allow withdrawals only after validating threshold EIP-712 signatures from approved signers. Each withdrawal type uses an independent nonce and deadline for replay protection, while recipients are restricted to wallet signers. The factory also emits standardized withdrawal events for created wallets.

Security Audit Report for Rhea Finance's agg-oracle

1. Unless explicitly specified, the security of the language itself (e.g., the solidity language), the underlying compiling toolchain and the computing infrastructure are out of the scope.

Security Audit Report for Bitget's share-card Contracts

1. Unless explicitly specified, the security of the language itself (e.g., the solidity language), the underlying compiling toolchain and the computing infrastructure are out of the scope.

Security Audit Report for Atoshi's Atoshi Chain

1. Unless explicitly specified, the security of the language itself (e.g., the solidity language), the underlying compiling toolchain and the computing infrastructure are out of the scope.

Security Audit Report for Bitget's EIP3009Upgradeable Contract

The EIP3009Upgradeable Contract extends RWAToken with EIP3009Upgradeable, enabling users to authorize transfers off-chain and have them submitted on-chain by relayers. RWAToken remains a compliance-aware rebase ERC-20 token, with all asset movement ultimately reusing the existing pause, freeze, sanctions oracle, and rebase accounting checks. This extension adds transferWithAuthorization(), receiveWithAuthorization(), and cancelAuthorization() entry points, along with EIP-712 signature verification, nonce-based replay protection, timewindow validation, and support for both EOA and ERC-1271 signatures. Relayers only submit user authorizations and do not directly hold user assets; whether an authorization can be executed still depends on the current on-chain state, including pause status, compliance checks, account restrictions, and the rebase index.

Security Audit Report for Inverter Network's WcmAdapter Contract

WcmAdapter is an incremental extension of the Bundler3 adapter system for World Markets on MegaETH. Bundler3 is built as a permissionless multicall dispatcher with adapterbased execution, transient initiator tracking, callback reentry support, and composable token movement across protocol integrations. This version introduces a dedicated adapter for the pinned USDm and wiTRY market, supporting exact-input and exact-output swaps through the World Markets router, balance-delta-based asset forwarding, bounded source-token refunds, and a Morpho debt repayment helper. The implementation also adds the required router interface and WCM-specific error handling while keeping router, chain, token, and market parameters fixed at deployment.

Security Audit Report for PopDEX's Bridge Contracts

The DexChain Bridge implements a Hub-and-Spoke cross-chain bridge architecture consisting of native Rust precompiled contracts on the Hub chain (Core) and Solidity upgradeable contracts on each Spoke chain (EVM). On the Hub side, three Rust modules are deployed as native precompiles: MessageGateway at 0x1001, which handles inbound message verification, hot/cold verifier signature validation, replay protection, and verifier set management; TokenBridge at 0x100f, which manages user withdrawals, deposit execution, and governance configuration synchronization to Spoke chains; and common, which provides shared utilities including EIP-712 digest construction. On the Spoke side, the bridge is implemented through Solidity UUPS-upgradeable contracts. MessageGateway.sol is responsible for receiving and validating cross-chain messages from the Hub chain, enforcing message execution rules, replay protection, and authorized gateway interactions. TokenBridge.sol manages token deposit and withdrawal flows on the Spoke chain, including locking or releasing bridged assets, initiating outbound bridge messages to the Hub, executing inbound bridge instructions, and applying bridge-related governance or configuration updates propagated from the Hub.

Security Audit Report for DgridAI's DGAIStaking

DGAIStaking is a staking and reward distribution protocol for the DGAI ecosystem. The protocol allows users to stake DGAI through self-operated nodes, delegate DGAI to existing nodes, or participate in a dedicated LLM staking pool. Rewards are distributed across multiple reward categories, including node, team, and LLM incentives, and can be claimed by eligible participants based on their staking positions. The protocol also supports unstaking with a cooldown period before principal withdrawal. Administrative functions include reward allocation management, staking parameter configuration, pause controls, and treasury-related fund management.

Security Audit Report for Morph's Morph Reth

1. Unless explicitly specified, the security of the language itself (e.g., the solidity language), the underlying compiling toolchain and the computing infrastructure are out of the scope.

Security Audit Report for XAUE Lab's xaue-lending

XAUE-lending is a tokenized gold lending vault that allows users to deposit Tether Gold (i.e., XAUT) and receive XAUE-backed lending shares (i.e., xLEND), which can be used as collateral in other protocols. The protocol converts deposited XAUT into XAUE via an external Agent Router, tracks value growth through a Cobo Fund Oracle NAV price feed, and splits any NAV appreciation surplus between users and the protocol. Redemptions are asynchronous: users request redemption, the vault routes XAUE back through the Router, and users later claim XAUT.

Security Audit Report for MegaETH's Normal Account Contracts

The Normal Account Contracts of MegaETH is a smart account infrastructure for EOAs leveraging EIP-7702 delegation. Its core objective is to upgrade standard EOAs into fully programmable smart accounts without deploying individual proxy contracts per user. Through EIP-7702’s code delegation mechanism, an EOA can dynamically bind to predefined account logic while retaining its original address. The system supports multi-key authorization (secp256k1, P-256, WebAuthn, external signers), fine-grained spending limits, customizable execution guards to constrain transaction behavior, a new gas-payment system for flexible fee sponsorship, and cross-chain settlement capabilities that let a single account securely and efficiently interact across multiple chains

Security Audit Report for NoirWallet's zcash-wallet-wasm

Unless explicitly specified, the security of the language itself (e.g., the solidity language), the underlying compiling toolchain and the computing infrastructure are out of the scope.

Security Audit Report for Mantle's Fiat24 Contracts

The Fiat24 Contracts of Mantle is a fiat-crypto payment infrastructure on Mantle that enables card authorization processing and operator-controlled vault management for fiat token operations. This update introduces a delegation vault and a double-booking mechanism. The delegation vault lets operators handle payouts, asset settlements, and rebalancing between Fiat24 tokens and USDC via the contract BufferPool and CryptoDeposit. The double-booking mechanism in the contract Fiat24CardAuthorizationMarqeta ensures that purchases via Ethena are properly tracked on-chain, preserving a verifiable record that links each payment to corresponding users.

Security Audit Report for bitgetwallet's DeFiCard Contracts

The DeFiCard Contracts project introduces an on-chain payment card infrastructure that connects card-based payment workflows with ERC20 token settlement and optional DeFi protocol actions. Its core business logic covers authorisation, settlement, and refund flows, allowing payment amounts to be escrowed, released to settlement recipients, cancelled back to users, or refunded through designated refund callers. The architecture is built around DeFiCard Router, an entry contract that routes calls through enabled core implementations such as DeFiCardCoreV1 via fallback delegatecall. Each card is backed by a dedicated DeFiCardSettlement contract, and a handler integrates with DeFi protocols so payment flows can optionally use DeFi actions.

Security Audit Report for baelor's agent-router

The project introduces AgentRouter, a permissionless entry contract for the Cobo tokenized gold ecosystem. This contract mediates between XAUT and XAUE by routing user mint and redemption operations through an underlying contract, CoboFundToken. Specifically, it allows any user to deposit XAUT and receive XAUE shares, as well as to redeem XAUE shares back to XAUT via an asynchronous redemption flow. Additionally, the contract implements a blacklist mechanism to block sanctioned or non-compliant users from participating in either minting or redemption operations.

Security Audit Report for HertzFlow's Perp Contracts

The Perp Contracts of HertzFlow is a perpetual exchange forked from GMX Synthetics v2.3-branch. It implements the Zero Funding Position (i.e., ZFP) feature, enabling ultra high leverage trading (e.g., 75x to 555x). Unlike normal positions that charge position fees, ZFP positions replace fees with a kink model profit extraction mechanism where the protocol takes a portion of profits based on ROI tiers, with higher ROI yielding more favorable user keep ratios. To support the ZFP feature safely, the project introduces several mechanisms. Specifically, a collateral range check (i.e., willBeSufficient and willBeTooMuch) is implemented for all ZFP positions to ensure their validity after the corresponding operations (e.g., position decrease). Additionally, an Early Force Liquidation (i.e., EFL) feature is implemented to forcibly close positions with excessive profits to protect liquidity providers.

Security Audit Report for bitgetwallet's bgw-swap-aggregator-evm

The Bitget Aggregator EVM project introduces BWAggFeeHandler, a new contract enabling a fee distribution mechanism via the standard handler interface (i.e., IBWAggBaseHandler.swap()). On each invocation, the function decodes the fee parameters, optionally charges a flat fee, and splits a percentage fee between a share recipient and the platform treasury. Before any distribution takes place, an ECDSA signature from an authorized signer is verified, ensuring that only approved fee-split parameters can be settled on-chain.

Security Audit Report for bitgetwallet's bgw-swap-aggregator-solana

This update introduces partner-integrated swap entrypoints for the Solana swap aggregator, enabling protocol fees to be split between the platform and a designated integration partner. It adds partner fee parameters, partner-specific fee collection for both SPL tokens and native SOL, and new swap wrappers across v1, v2, and v3 routes. The update also reorganizes swap modules into versioned directories, exposes the new instructions in the program interface, adds fee split logging, and includes a custom heap allocator for Solana builds.

Security Audit Report for Ref Finance's Burrowland, Ref-Dcl, Ref-Exchange

Note that, we did NOT audit all the modules in the repository. Specifically, the files covered in this audit include: 1 burrowland/contracts/contract/src/upgrade.rs 2 burrowland/contracts/contract/src/events.rs 3 burrowland/contracts/contract/src/price_receiver.rs 4 burrowland/contracts/contract/src/legacy.rs 5 burrowland/contracts/contract/src/config.rs 6 burrowland/contracts/contract/src/lib.rs 7 burrowland/contracts/contract/src/account_view.rs 8 burrowland/contracts/contract/src/margin_actions.rs 9 burrowland/contracts/contract/src/margin_trading.rs 10 burrowland/contracts/contract/src/margin_pyth.rs 11 burrowland/contracts/contract/src/margin_config.rs 12 burrowland/contracts/contract/src/fungible_token.rs 13 burrowland/contracts/contract/src/big_decimal.rs 14 burrowland/contracts/contract/src/margin_accounts.rs 15 burrowland/contracts/contract/src/asset_config.rs 16 burrowland/contracts/contract/src/account.rs 17 burrowland/contracts/contract/src/asset_view.rs 18 burrowland/contracts/contract/src/pyth.rs 19 burrowland/contracts/contract/src/prices.rs 20 burrowland/contracts/contract/src/storage.rs 21 burrowland/contracts/contract/src/shadow_actions.rs 22 burrowland/contracts/contract/src/margin_position.rs 23 burrowland/contracts/contract/src/utils.rs 24 burrowland/contracts/contract/src/margin_base_token_limit.rs 25 burrowland/contracts/contract/src/protocol_debts.rs 26 burrowland/contracts/contract/src/storage_keys.rs 27 burrowland/contracts/contract/src/booster_staking.rs 28 burrowland/contracts/contract/src/actions.rs 29 burrowland/contracts/contract/src/client_echo.rs 30 31 ref-contracts/ref-exchange/src/account_deposit.rs 32 ref-contracts/ref-exchange/src/token_receiver.rs 1https://github.com/burrowHQ/burrowland/tree/margin_trading 2https://github.com/rhea-finance/burrowland-fix/tree/fix 3https://github.com/ref-finance/ref-dcl/tree/margin_trading 4https://github.com/ref-finance/ref-contracts/tree/margin_trading

Security Audit Report for Ref Finance's Burrowland, Ref-Dcl, Ref-Exchange

Note that, we did NOT audit all the modules in the repository. Specifically, the files covered in this audit include: 1 burrowland/contracts/contract/src/upgrade.rs 2 burrowland/contracts/contract/src/events.rs 3 burrowland/contracts/contract/src/price_receiver.rs 4 burrowland/contracts/contract/src/legacy.rs 5 burrowland/contracts/contract/src/config.rs 6 burrowland/contracts/contract/src/lib.rs 7 burrowland/contracts/contract/src/account_view.rs 8 burrowland/contracts/contract/src/margin_actions.rs 9 burrowland/contracts/contract/src/margin_trading.rs 10 burrowland/contracts/contract/src/margin_pyth.rs 11 burrowland/contracts/contract/src/margin_config.rs 12 burrowland/contracts/contract/src/fungible_token.rs 13 burrowland/contracts/contract/src/big_decimal.rs 14 burrowland/contracts/contract/src/margin_accounts.rs 15 burrowland/contracts/contract/src/asset_config.rs 16 burrowland/contracts/contract/src/account.rs 17 burrowland/contracts/contract/src/asset_view.rs 18 burrowland/contracts/contract/src/pyth.rs 19 burrowland/contracts/contract/src/prices.rs 20 burrowland/contracts/contract/src/storage.rs 21 burrowland/contracts/contract/src/shadow_actions.rs 22 burrowland/contracts/contract/src/margin_position.rs 23 burrowland/contracts/contract/src/utils.rs 24 burrowland/contracts/contract/src/margin_base_token_limit.rs 25 burrowland/contracts/contract/src/protocol_debts.rs 26 burrowland/contracts/contract/src/storage_keys.rs 27 burrowland/contracts/contract/src/booster_staking.rs 28 burrowland/contracts/contract/src/actions.rs 29 burrowland/contracts/contract/src/client_echo.rs 30 31 ref-contracts/ref-exchange/src/account_deposit.rs 32 ref-contracts/ref-exchange/src/token_receiver.rs 1https://github.com/burrowHQ/burrowland/tree/margin_trading 2https://github.com/rhea-finance/burrowland-fix/tree/fix 3https://github.com/ref-finance/ref-dcl/tree/margin_trading 4https://github.com/ref-finance/ref-contracts/tree/margin_trading

Security Audit Report for Bitget's RWADividendDistributor Contract

The RWA EVM project introduces RWADividendDistributor, a new contract enabling trustless dividend distribution for tokenized real-world stock dividends. Dividends are distributed via a Merkle tree model. An operator submits a corporate action through contract CorporateActionOracle, which validates and anchors a new Merkle root on-chain. Users then claim entitlements by submitting a Merkle proof alongside an EIP-712 signature from a SIGNER_ROLE holder. Claims are cumulative, that each user’s position in the tree represents total historical entitlement, and only the delta over prior claimed amounts is transferred. Two payout token types are supported: RWA tokens and standard ERC-20 stablecoins. Replay protection is enforced through a tree nonce and a bitmap-based unordered nonce. Per-channel pause controls allow operators to halt claims for individual (rwaToken, payoutToken) pairs independently.

Security Audit Report for AlphaX-Protocol's AlphaX-Protocol-Contract-Tron

This project is a TRON-based custody vault and gasless transfer system. The contract DEXVaultV1 is an upgradeable custody vault that allows users to deposit assets and permits withdrawals when predefined risk controls are satisfied. The gasless wallet layer consists of the contract GasFreeController, the contract GasFreeAccount, and the contract GasFreeFactory. Users can store funds in their own GasFreeAccount contracts, sign transactions off-chain, and rely on a relayer to pay for transaction costs during execution. The contract GasFreeController handles EIP-712-based permit execution, while the contract GasFreeFactory deploys deterministic accounts through CREATE2. Note that for contract DEXVaultV1, we only audit its compatibility with Tron.

Security Audit Report for R25's AsyncVault Contracts

The AsyncVault contracts are an upgradeable tokenized asset vault system of R25. AsyncVault follows an asynchronous redemption model, where deposits mint time-locked shares and redemptions proceed through a request-based flow that is settled after maturity, with withdrawal fulfillment handled through a separate queue component. Across this module, deposited assets are forwarded to a custodian address, withdrawals are funded by a separate payer account through the queue, and vault instances are created and tracked by the factory.

Security Audit Report for R25's SyncVault Contracts

The SyncVault contracts form an upgradeable tokenized asset vault system within R25. Following a synchronous redemption model, SyncVault issues time-locked shares upon deposit and processes redemptions either immediately within configured limits or through a queued flow for deferred fulfillment. Throughout this module, deposited assets are forwarded to a custodian address, withdrawals are funded by a dedicated payer account, and vault instances are deployed and tracked by a factory contract. Specifically, for code in Version 1, the audit only focuses on the smart contracts in the following directories/files: src/r25-pc For code in Version 2, the audit only focuses on the smart contracts in the following directories/files: src/r25-pc/SyncVault Other files are not within the scope of the audit. Additionally, all dependencies of the Target are considered reliable in terms of both functionality and security, and are therefore not included in the audit scope.

Security Audit Report for MegaETH's Staking Contracts

The Staking Contracts of MegaETH is a KPI-based staking system for the MEGA token on the MegaETH chain. Users can stake MEGA tokens and earn MEGA tokens based on achieved KPI milestones (i.e., tranches). Each tranche is created with a reward token and maturity curves that scale rewards according to the staking duration. This update introduces two key features: (1) a recommit mechanism, enabling users to claim rewards as new stakes; (2) proportional releases of locked staking rewards.

Security Audit Report for Bitget's RWA EVM Contracts

The protocol introduces an on-chain Real World Asset (RWA) tokenization implementation on EVM-compatible chains, enabling regulated issuance and redemption of asset-backed tokens representing securities. The system is organized around three core contracts: RWAToken, RWATokenManager, and RWATokenFactory. RWAToken is an upgradeable ERC-20 token deployed via a BeaconProxy pattern, implementing a rebase mechanism in which all token balances are stored as raw values and divided by a global rebase index at read time. The rebase index is updated through a split ratio, allowing the protocol to model corporate splits and reverse splits by adjusting the index proportionally across all holders simultaneously without modifying individual balances. Each RWAToken instance also enforces three-layered compliance guards: KYC verification through IDRegistry, freeze controls, and protocol-wide sanctions screening via SanctionsList. RWATokenFactory handles token deployment and wires each instance to shared infrastructure, including a CorporateActionOracle, which governs time-windowed corporate actions such as rebase splits and name and symbol updates. RWATokenManager acts as the primary entry point for user-facing mint and redeem flows, both of which operate through an EIP-712 Attestation signed by a trusted SIGNER_ROLE. Each attestation binds the token, quantity, price, settlement amount, and expiration into a single one-time-use authorization. Price integrity is enforced by SanityCheckOracle, which validates the attested price against an independent reference via either a Pyth Lazer Pro on-chain verification or a SignedPrice signed by multi-party, rejecting deviations exceeding a configurable basis-point threshold. Throughput is governed by RateLimiter, which applies a linear-decay sliding-window quota at both the global per-token and per-user levels. Market session eligibility is enforced by MarketHours. The protocol is designed for a KYC DEX intermediary model, where partner DEX contracts hold calling rights and are responsible for end-user compliance off-chain before invoking the Manager on behalf of their users.

Security Audit Report for Mantle's UR Topup Contract Solana

1. Unless explicitly specified, the security of the language itself (e.g., the solidity language), the underlying compiling toolchain and the computing infrastructure are out of the scope.

Security Audit Report for DuboisGold's KBAR

KBAR is an upgradeable ERC721 contract representing ownership of physical gold bars held in custody. The system integrates role-based administration with transfer-time compliance controls and fee mechanisms. Administrative roles manage minting, redemption, freezing, fee configuration, storage-fee enforcement, pausing, and upgrades.

Security Audit Report for MegaETH's Staking Contracts

The Staking Contracts of MegaETH is a KPI-based staking system for the MEGA token on the MegaETH chain. Users can stake MEGA tokens and earn MEGA tokens based on achieved KPI milestones (i.e., tranches). Each tranche is created with a reward token and maturity curves that scale rewards according to the staking duration. This update introduces three key features: (1) a pending reward mechanism, (2) integration with Predicate2 attestations, and (3) a linear maturity curve.

Security Audit Report for Bitget's BGW7702

BGW7702 is a smart-account framework built for EIP-7702 delegation with optional ERC- 4337 compatibility. It separates execution and control planes: BGW7702Logic handles batched call execution (aggregate/aggregateV2), while BGW7702Admin manages EIP-712 dual-signature validation (platform signer + account owner) and unordered nonce tracking. BGW7702Base provides ownership, operator-based pause/rescue controls, and shared admin utilities, and BGW7702Helper maintains business-type metadata mappings. The design aims to keep execution logic lightweight and centralize sensitive state management in a dedicated admin contract, enabling operational control, emergency pause, and consistent signature policy enforcement across delegated accounts.

Security Audit Report for DCS Protocol's Commerce Payments

The Commerce Payments Protocol is a permissionless protocol for on-chain payments that mimics traditional authorize-and-capture payment flows. It facilitates secure escrow-based payments through modular token collectors and operator-driven execution, while separating authorization, settlement, capture, reclaim, and refund flows. The core payment state machine is implemented in AuthCaptureEscrow, while custody and settlement are handled through a dedicated TokenStore for each operator to avoid commingling funds across operators. The protocol supports multiple collection mechanisms, including direct transfers, signature-based transfers, and swap-assisted settlement, while providing relatively clear fund and state boundaries among the payer, receiver, and fee recipient.

Security Audit Report for Bitget Wallet's ETH Rust SDK

The ETH Rust SDK is a Rust-based Ethereum wallet library exposed to Go applications through a unified FFI interface. It provides comprehensive wallet capabilities including address derivation, public key generation, message signing, and transaction signing. Developers interact with the SDK via a single entry point, tee_wallet_call, supplying function names and JSON-formatted parameters. The SDK supports multiple Ethereum standards such as EIP 55 addresses, EIP712 typed data signing, EIP1559 and EIP2930 transactions, and advanced EIP7702 authorization-based transactions. Designed for flexibility and security, it allows seamless integration of Ethereum wallet functionality into Go-based systems.

Security Audit Report for Pacifica's Bridge Contract

Bridge Contract is a cross-chain bridge protocol on Solana designed to facilitate transfers of SOL and SPL tokens across different chains. The protocol operates by emitting on-chain logs that are observed and processed by an off-chain relayer service, which coordinates and executes corresponding actions on the destination chain. The system is composed of two dedicated programs: sol-bridge, which handles native SOL bridging, and spl-bridge, which manages SPL token registration and transfers. This separation allows for clearer responsibility boundaries and more flexible handling of different asset types within the bridging workflow.

Security Audit Report for Cobo's CoboTokenization

CoboTokenization consists of two upgradeable systems, CoboERC20 and Fund. The CoboERC20 system includes contracts CoboERC20 and CoboERC20Wrapper, where CoboERC20 provides controlled ERC-20 issuance and transfer controls and CoboERC20Wrapper handles underlying asset wrapping and unwrapping with reconciliation-based recovery minting. The Fund system includes contracts CoboFundOracle, CoboFundToken, and CoboFundVault, which maintain APR and compute NAV, manage share subscriptions and asynchronous redemptions, and execute custody settlement payouts. The overall security model relies on role separation and whitelist and blacklist checks on critical execution paths.

Security Audit Report for Rhea Finance's Rhea LSD

The protocol is deployed on the NEAR network and issues an LSD (Liquid Staking Derivative) token. Users deposit underlying tokens into the protocol, which are then supplied to Burrowland for yield generation. Privileged roles periodically withdraw rewards from Burrowland, swap them into underlying tokens, and re-deposit them to compound returns. Users can unstake at any time by burning their LSD tokens to redeem the corresponding underlying assets. The protocol also introduces cross-chain functionality, enabling users to complete both cross-chain transfers and deposits of underlying tokens within a single transaction.

Security Audit Report for Flap.sh's FlapAIProvider Contracts

The FlapAIProvider Contracts of Flap.sh are an upgradeable, role-governed AI oracle protocol for on-chain request handling, fulfillment, and refund settlement. The contract allows users to submit AI reasoning jobs via the function reason(), pay model-based fees, and track each request by ID. The role FULFILLER_ROLE delivers outcomes via the function fulfillReasoning(), including the selected choice and an IPFS CID for reasoning evidence, while failed jobs can be processed via the function refundRequest(). The role DEFAULT_ADMIN_ROLE can register and disable models, set pricing-related limits, tune callback gas, and withdraw undelivered balances, giving the protocol configurable operations.

Security Audit Report for Cobo's CoboTokenization

CoboTokenization consists of two upgradeable systems, CoboERC20 and Fund. The CoboERC20 system includes contracts CoboERC20 and CoboERC20Wrapper, where CoboERC20 provides controlled ERC-20 issuance and transfer controls and CoboERC20Wrapper handles underlying asset wrapping and unwrapping with reconciliation-based recovery minting. The Fund system includes contracts CoboFundOracle, CoboFundToken, and CoboFundVault, which maintain APR and compute NAV, manage share subscriptions and asynchronous redemptions, and execute custody settlement payouts. The overall security model relies on role separation and whitelist and blacklist checks on critical execution paths.

Security Report for MegaETH’s Web and Cloud Infrastructure

MegaETH’s Web and Cloud Infrastructure on Google Cloud Platform (GCP), its externally

Security Audit Report for Habittrade's Stove Protocol Contracts

The protocol establishes an on-chain stock trading market that enables the issuance and trading of tokenized stocks. Stock tokens are created via a factory contract, while certain stock-related operations, such as dividends, stock splits, and reverse splits are handled through trusted off-chain logic and executed on-chain by privileged operators. User trading activity, including buying and selling stock tokens, is facilitated through the RFQSettlement contract, which manages order execution and settlement. By combining on-chain enforcement with off-chain computation, the protocol aims to provide a flexible and efficient framework for tokenized equity management and trading.

Security Audit Report for Morph Emerald upgrade

The target of this audit is the code repositories of Morph Emerald upgrade. The Morph Emerald upgrade introduces alternative fee transactions, enabling native multi-token gas payments on the Morph L2 chain. This upgrade allows users to pay gas fees using registered ERC-20 tokens.

Security Audit Report for OKX's smart-wallet-recovery & groth16-solana

This project is a smart account recovery system deployed on Solana. It combines ZK-Email zero-knowledge proofs, ECDSA signature verification, and a DKIM registry to provide scalable, low-interaction account recovery. Smart wallet providers can pre-register their DKIM public keys via the DKIM registry, eliminating the need to trust third-party DNS providers. When a user needs to recover an account, they submit proofs to the recovery-manager contract, which consist of an off-chain generated ZK-Email proof demonstrating ownership of a specific email and an off-chain 2FA-verified ECDSA signature. After verification, the smart account’s owner key can be updated, completing the account recovery process.

Security Audit Report for OKX's Smart Wallet Recovery

The project implements a cross-chain recovery system for unified smart accounts, focusing on the Ethereum Virtual Machine (EVM) stack implementation. The system integrates ZKEmail and ECDSA technologies to deliver an extensible, low-interaction, and multi-chain reusable recovery mechanism for EVM-compatible chains.

Security Audit Report for Bitget's bgw-swap-aggregator-evm

BWAggregator is a DEX aggregator that enables swaps across Uniswap and its fork protocols through specialized router and handler actions. The platform supports ERC20-to-ERC20, ETH-to-ERC20, and ERC20-to-ETH swaps through a meta-transaction architecture. Users can specify complex action sequences for the aggregator to execute atomically on their behalf, typically involving multiple swaps across different protocols. The system employs a threephase execution method with fund tracking. Fee collection comprises two components: a fixed deduction amount and a proportional fee amount.

Security Testing Report for MegaETH: MegaEVM, Stateless Validator & SALT

The security testing was conducted over a six-week period, from October 11, 2025 to November 28, 2025, and focused on: MegaETH EVM (MegaEVM), Small Authentication Large Trie (SALT), and Stateless Validator.

Security Audit Report for OKX's OKX Smart Wallet

The project implements an Account Abstraction (AA) wallet implementation on the Ethereum Virtual Machine (EVM) compatible chains, allowing users to deploy AA smart contract wallets. It also allows Externally Owned Accounts (EOAs) to extend transaction execution logic by setting the AA wallet code, simplifying the processing of complex transaction operations.

Security Audit Report for Bitway Labs's Bitway App Chain

The Bitway App Chain of the Bitway Lab is a L1 blockchain, facilitating to unlock the value of underutilized Bitcoins. To support full Bitcoin compatibilities, the Bitway App Chain is designed to enable transactions to be signed with standard Bitcoin wallets for flexibility. The Bitway App Chain natively integrate lending and farming services, powered by Discreet Log Contracts (i.e., DLC). For the Bitcoin-collateralized lending system of the Bitway App Chain, it enables native Bitcoin-backed loans, integrating decentralized oracles (i.e., Oracle++), permissionless liquidity pools, and liquidations. Specifically, The Bitway App Chain implements a liquidity pool-based lending protocol that allows Bitcoin holders to borrow while enabling lenders to earn returns. Loan assets are managed on the Bitway App Chain, removing the need for third-party custodians during the loan period. In addition to lending, the Bitway App Chain also provides a farming service that rewards users for staking their coins. By participating in farming, users can lock their assets and earn incentives, distributed on an epoch basis.

Security Audit Report for Rabby Wallet's swap-router-v1

The protocol is a decentralized exchange (DEX) router that facilitates efficient token swaps by integrating multiple aggregators through a flexible adapter pattern, while ensuring robust fee management. Its core component, the DEX Aggregator, is a smart contract system that optimizes trades by splitting orders across various DEXs to secure better prices and minimize slippage for users.

Security Audit Report for Mantle's Fiat24 Contracts

Fiat24 is a digital banking platform built on blockchain technology that bridges banking services with the crypto ecosystem. The platform provides NFT-based digital accounts as unique identifiers for users, with each account represented as an ERC-721 token featuring customizable features and status management. Fiat24 supports multiple fiat currencies through tokenized representations, including USD24, EUR24, CHF24, GBP24, and CNH24, with real-time exchange rates and seamless cross-currency transactions. The platform features crypto deposit functionality that enables users to deposit USDC and other cryptocurrencies, automatically converting them to fiat tokens at current market rates.

Security Audit Report for Lista's Lista Lending

This audit focuses on the smart contracts located in the src/folder of the repository, excluding the following directories: src/moolah/mocks/* src/moolah-vault/mocks/* src/vault-allocator/mocks/*

Security Audit Report for Side Protocol

Side Protocol serves as the extension layer of Bitcoin. At its core is Side Chain, the first high-performance, fully Bitcoin-compatible dPoS Layer 1 blockchain, designed to shape the future of Bitcoin finance. Side Chain supports bridging for native BTC and other Bitcoin assets, including runes.

Security Audit Report for Halo

Halo is a social monetization platform for the AI era. Earn passive rewards from posts, transactions, and engagements with 1M+ pioneers.

Security Audit Report for SoSoValue Index

The SoSoValue Index Protocol is a cutting-edge spot index solution designed to make crypto investments simple and secured. SSI Protocol leverages on-chain smart contracts to repackage multi-chain, multi-asset portfolios into Wrapped Tokens (SSI). These tokens represent a basket of underlying assets, enabling Wrapped Tokens to track the value fluctuations of the spots basket, effectively achieving the effects of passive index investing.

Security Audit Report for Neo X

Neo X is an EVM compatible sidechain incorporating Neo’s distinctive dBFT consensus mechanism. Serving as a bridge between Neo N3 and the widely used EVM network, Neo X will play a crucial role in expanding the Neo ecosystem and offering developers more opportunities for innovation.

Security Audit Report for PumpBTC Contracts

The audit focuses on PumpBTC Contracts, enabling users to stake Wrapped Bitcoin tokens into the PumpStaking contract and mint pumpBTC tokens at a 1:1 ratio. These assets are then unwrapped into BTC for staking and rewards on Babylon. The protocol offers standard and instant unstake options with fees.

Security Audit Report for DeltaTrade

DeltaTrade is a multi-chain decentralized trading protocol that enhances user capabilities with sophisticated on-chain trading strategies such as Grid Trading, DCA, Rebalancing Grid, MultiChain Support, OrderBook, Full Platform Market Making and AI Powered Strategy.

Security Audit Report for BridgeV2 Contracts

Spherium Bridge utilizes LayerZero framework to bridge tokens from source chain to target chain.

Security Audit Report for Octopus Restaking

The NEAR Restaking project is launched by Octopus Team, and aims at enhancing the utilization of NEAR. Any user can deposit NEAR assets into the Restaking protocol, which provides proof of stake to side chains registered with the protocol through a Restaking method. Users will not only earn rewards on NEAR but also receive token rewards from specific side chains. When a side chain's validator acts maliciously, users' assets may be at risk of being slashed.

Security Audit Report for WenCore

WEN Protocol is a decentralized, censorship-resistant, and community-owned protocol that enables users to secure loans using Liquidity Staking Derivatives (LSDs) as collateral. These loans have minimal fees and provide up to 7x leverage, with repayments made in wenUSD.

Security Audit Report for Puffer Finance pufETH Contracts

Puffer is a decentralized native liquid restaking protocol (nLRP) built on Eigenlayer. It makes native restaking on Eigenlayer more accessible, allowing anyone to run an Ethereum Proof of Stake (PoS) validator while supercharging their rewards.

Security Audit Report for Cakepie Contracts

Cakepie is a yield optimization protocol built upon PancakeSwap. It enables users to manage PancakeSwap V2/V3 positions and claim rewards and convert their CAKE token or locked CAKE positions from PancakeSwap on Cakepie. Users with voting powers can vote in Cakepie and votes will be cast to Pancake’s GaugeVoting. Cakepie also incorporates a bribe market where users can add bribes that are distributed to active voters.

Security Audit Report for PancakeSwap VECake

Pancake launched a governance project VECake for voting. VECake enables users to acquire voting powers by depositing their CAKE tokens. These voting powers empower users to vote on Pancake Gauge weights.

Security Audit Report for BurrowLand

Burrowland is a decentralized lending and borrowing platform based on the NEAR blockchain. Burrowland allows users to lend tokens and earn interest, as well as borrow tokens by providing collateral and paying interest. All supplied collateral assets and borrowed assets for each account are used to compute the health factor of that account. If the health factor is less than 100%, it means the account can be partially liquidated and cannot borrow more without repaying some amount of the existing borrowed assets or providing additional collateral assets. It also provides a farming mechanism to incentivize users.

Security Audit Report for Ref Exchange

Ref-Exchange is a decentralized exchange (DEX) deployed on the NEAR blockchain by Ref Finance. The protocol implements different types of trading pairs based on token characteristics, such as simple pool, stable pool, and rated pool. For instance, for trading pairs involving stablecoins (i.e., stable pool), the protocol adopts the Curve model to minimize impermanent loss, fees, and slippage. Additionally, to facilitate user operations like providing liquidity and swapping, the protocol has implemented an internal account model. Users are required to pay a certain storage fee to register an internal account in order to interact with the protocol for fund transactions.

Security Audit Report for Magpie Radpie

Magpie launched Radpie, a yield optimization protocol built upon Radiant. Users could deposit their assets on Radpie to earn enhanced yields.

Security Audit Report for EOS EVM

The EOS EVM serves as an implementation of the Ethereum Virtual Machine (EVM). It is implemented in C++ and compiled to a WASM binary to be executed within the EOS blockchain. The EOS EVM utilizes a modified version of Silkworm and Evmone for the execution of the EVM operations.

Security Audit Report for StakeTogether st-v1-contracts

StakeTogether is an Ethereum staking protocol designed especially for communities. It allows users to deposit ETH into staking pools and receive stpETH tokens as collateral. The purpose of StakeTogether is to facilitate the creation of validators on the Ethereum 2.0 beacon chain to support the security and operation of the entire Ethereum network.

Security Audit Report for Stratos Chain and Stratos Decentralized Storage (SDS)

Stratos is a decentralized data architecture. Stratos provides scalable, reliable, and self-balanced storage, database, and computation networks, creating a robust foundation for data processing.

Security Audit Report for Noah-DAO

Noah DAO is a decentralized exchange built on the EOS EVM. It introduces a mechanism to incentivize liquidity provision and active governance participation by rewarding users with protocol tokens and voting rights, thereby aligning interests within the ecosystem.

Security Testing Report for Radiant V2

Radiant V2 is a cross-chain DeFi lending protocol developed by Radiant Capital. Radiant Capital has engaged us to perform security testing (as the red team) on the smart contracts of Radiant V2 to identify potential risks.

Security Audit Report for Aura

Aura Network is a high performance Layer1 ecosystem with built-in modularity, leading the mass adoption of Web3 in emerging markets. It has robust partnership network, expansive engineering resources and rich track record.

Security Audit Report for Phoenix Bonds

Phoenix Bonds is a principal-protected bonding platform that helps protocols with liquidity-bootstrapping, provides perpetually-boosted yield to users and works with all yield bearing assets.

Security Audit Report for PancakeSwap Cross Farming Contracts

PancakeSwap launched a cross farming project. It involves allowing users to deposit LP tokens on EVM-compatible chains to the MasterChefV2 contract on the Binance Smart Chain network using the cBridge SGN network as the cross-chain message forwarder.

Security Audit Report for Mellow Vaults

The Mellow project provides an open platform for liquidity providers to earn rewards from their liquidities and strategists to earn performance fees by implementing active liquidity management strategies to manipulate the liquidities.

Security Audit Report for Multichain veMULTI Contracts

Multichain is the ultimate Router for web3. It is an infrastructure developed for arbitrary cross-chain interactions.

Security Audit Report for LiNEAR

LiNEAR Protocol is a liquid staking solution built on the NEAR Protocol. LiNEAR unlocks liquidity of the staked NEAR by creating a staking derivative to be engaged with various DeFi protocols on NEAR and Aurora, while also enjoying over 10% APY staking rewards of the underlying base tokens. LiNEAR is the cornerstone piece of the NEAR-Aurora DeFi ecosystem.

Security Audit Report for Windranger Auction Contract

Windranger facilitates the growth of mantle and web3 ecosystems by partnering with builders to architect extraordinary cultures globally. It provides long-term talent, recruitment, HR, and operations services for companies in the Web3 and Metaverse space - including DAOs.

Security Audit Report for Alpaca Delta Neutral Vault

The Alpaca Finance is a leveraged yield farming and liquidity providing protocol running on Binance Smart Chain (BSC) and Fantom. The audited implementation extends the previous version by adding the support of a new Delta Neutral Vault and its associated workers, including the workers that support MDEX and PancakeSwap.

Security Audit Report for YPool Smart Contract

XY Finance is a cross-chain interoperability protocol aggregating DEXs & Bridges. With the ultimate routing across multi-chains, borderless and seamless swapping is just one click away.

Security Audit Report for Poly Contracts

Poly Network is a global cross-chain protocol for implementing blockchain interoperability and building Web3.0 infrastructure. Poly Network has connected a variety of over 35 different blockchains, including popular ones such as Ethereum, Polygon, Arbitrum, and BNB Chain, as well as others such as Aptos, Optimism, Neo, Metis, and Gnosis Chain. Since the launch, the protocol has enabled cross-chain asset transfer of more than $16 billion USD.