Skip to content
$1,000,000 in security audit grants are live now, Apply here →
Get a quote

Security review · May 2025

Hyperliquid OFT Deployment

for Abracadabra Money

Guardian's review of Hyperliquid OFT Deployment for Abracadabra Money, published May 2025. The report records 3 findings, including 1 low and 2 informational.

Get a quote Read the full report
Published
Review window
May 20 to 21, 2025
Language
Solidity
Chains
Hyperliquid
Sector
Cross-chain, Stablecoins
  • 0 Critical
  • 0 High
  • 0 Medium
  • 1 Low
  • 2 Informational

1 resolved · 2 acknowledged

Scope

Findings 3

  1. L-01 Low Incorrect Safe Address Used Validation Resolved
    Location
    hardhat.config.ts: 158

    Description

    The safeAddress for Hyperliquid is set to NIBI_SAFE_ADDRESS instead of the HYPER_SAFE_ADDRESS, hence the intended multi-sig will not be used as the signer for LZ transactions. (Figure. See the PDF report.)

    Recommendation

    Update the safeAddress to HYPER_SAFE_ADDRESS.

    Link to L-01
  2. I-01 Informational HyperEVM Block Confirmation Warning Warning Acknowledged
    Location
    layerzero.mim.config.ts

    Description

    The current block confirmations required for HyperEVM is set to 20, which is relatively quick at 2 seconds/block. Although the re-org risks are relatively unknown for HyperEVM, it may be prudent to increase or closely monitor the necessary block confirmations.

    Recommendation

    Consider closely monitoring or increase the HyperEVM block confirmations.

    Link to I-01
  3. I-02 Informational MIM DVN Not Deployed on Hyperliquid Warning Acknowledged
    Location
    Global

    Description

    The MIM DVN is currently not listed at https://metadata.layerzero-api.com/v1/metadata/deployments for Hyperliquid although the OFT intends for both the LayerZero Labs DVN and MIM DVN to be used (['LayerZero Labs', 'MIM']).

    Recommendation

    Ensure the MIM DVN is deployed on Hyperliquid.

    Link to I-02

More from Abracadabra Money

All 19 reports

  1. MagicGLP Upgrade

     11 findings1 high 11 findings: 1 high, 10 low

  2. PurrSwap Aerodrome

     105 findings9 high 105 findings: 9 high, 23 medium, 45 low, 28 informational

  3. PurrSwap ve33

     74 findings5 critical · 10 high 74 findings: 5 critical, 10 high, 20 medium, 39 low

  4. PurrSwap Final Review

     6 findings1 high 6 findings: 1 high, 1 medium, 4 low

Put your code through the same review.

This review started with a conversation about scope. Tell us what you are building and we will plan yours with you.

Get a quote