Guardian's review of Corn Network Delisting for USDT0, published May 2026. The report records 1 finding, including 1 low.
- Published
- Review window
- May 20, 2026
- Chains
- Ethereum, Arbitrum, Ink, Hyperliquid, Polygon, Monad, Solana, Stellar
- Sector
- Stablecoins
- 0 Critical
- 0 High
- 0 Medium
- 1 Low
- 0 Informational
Scope
Findings 1
-
L-01 Low Corn and Rootstock retain active USDT0 routes after the removal set Warning Acknowledged
Description
The queued Safe transactions do not cut off every USDT0 route involving Corn. Rootstock has no reachable Safe transaction-service entry in the workbook and the Rootstock OFT still has
peers(30331)set to Corn's OFT. The fork validation also shows Rootstock can still send to Corn after applying the current transaction set. The Corn Safe row only returns a stale no-calldata transaction at nonce 94 while the Safe nonce is 97. It does not remove any OFT peers. Corn's OFT still has outbound peers configured, including Ethereum, Rootstock, XLayer and Plasma. The Corn fork test confirms the existing send behavior to another USDT0 chain remains usable.This contradicts the stated requirement that Corn be cut off on every USDT0 chain. If other chains remove Corn as a peer while Corn or Rootstock still allow sends, users can initiate transfers on routes that the decommissioning is meant to disable.
Recommendation
Add and execute current-nonce Safe transactions for Rootstock and Corn before approving the removal set. Rootstock should remove
CORN_EIDas an OFT peer, matching the other non-Plasma chains. Corn should either remove all remote USDT0 peers or otherwise block outgoing sends so users cannot initiate transfers from Corn after the cutoff.
No findings match.
More from USDT0
All 20 reportsPut your code through the same review.
This review started with a conversation about scope. Tell us what you are building and we will plan yours with you.
