Skip to content
$1,000,000 in security audit grants are live now, Apply here →

Security review · May 2026

Corn Network Delisting

for USDT0

Guardian's review of Corn Network Delisting for USDT0, published May 2026. The report records 1 finding, including 1 low.

Published
Review window
May 20, 2026
Chains
Ethereum, Arbitrum, Ink, Hyperliquid, Polygon, Monad, Solana, Stellar
Sector
Stablecoins
  • 0 Critical
  • 0 High
  • 0 Medium
  • 1 Low
  • 0 Informational

1 acknowledged

Scope

Findings 1

  1. L-01 Low Corn and Rootstock retain active USDT0 routes after the removal set Warning Acknowledged

    Description

    The queued Safe transactions do not cut off every USDT0 route involving Corn. Rootstock has no reachable Safe transaction-service entry in the workbook and the Rootstock OFT still has peers(30331) set to Corn's OFT. The fork validation also shows Rootstock can still send to Corn after applying the current transaction set. The Corn Safe row only returns a stale no-calldata transaction at nonce 94 while the Safe nonce is 97. It does not remove any OFT peers. Corn's OFT still has outbound peers configured, including Ethereum, Rootstock, XLayer and Plasma. The Corn fork test confirms the existing send behavior to another USDT0 chain remains usable.

    This contradicts the stated requirement that Corn be cut off on every USDT0 chain. If other chains remove Corn as a peer while Corn or Rootstock still allow sends, users can initiate transfers on routes that the decommissioning is meant to disable.

    Recommendation

    Add and execute current-nonce Safe transactions for Rootstock and Corn before approving the removal set. Rootstock should remove CORN_EID as an OFT peer, matching the other non-Plasma chains. Corn should either remove all remote USDT0 peers or otherwise block outgoing sends so users cannot initiate transfers from Corn after the cutoff.

More from USDT0

All 20 reports
  1. Stellar Deployment

    2 findings 2 findings: 2 informational
  2. Canary Chain Configuration Verification

    4 findings 4 findings: 4 informational
  3. Solana Transaction Verification

    4 findings 4 findings: 1 medium, 3 informational
  4. XAUT0 Wiring

    4 findings 4 findings: 2 low, 2 informational

Put your code through the same review.

This review started with a conversation about scope. Tell us what you are building and we will plan yours with you.

Get a quote