Skip to content
$1,000,000 in security audit grants are live now, Apply here →
Get a quote

Security review · June 2025

Rootstock Deployment

for USDT0

Guardian's review of Rootstock Deployment for USDT0, published June 2025. The report records 2 findings, including 2 informational.

Get a quote Read the full report
Published
Review window
June 23 to 24, 2025
Language
Solidity
Chains
Ethereum
Sector
Stablecoins, Cross-chain
  • 0 Critical
  • 0 High
  • 0 Medium
  • 0 Low
  • 2 Informational

2 pending

Findings 2

  1. I-01 Informational TON Config Ahead of Rootstock Config Warning Pending
    Location
    Global

    Description

    On Ethereum and Arbitrum safes, the first queued transactions #54 and #56 respectively, set the enforced options with TON. This contrasts with other safes which currently only have Rootstock configurations queued. (Figure. See the PDF report.)

    Recommendation

    Ensure the TON configuration on Ethereum and Arbitrum is intentional.

    Link to I-01
  2. I-02 Informational RPC Key Hardcoded Warning Pending
    Location
    hardhat.config.js

    Description

    The dkey param for the DRPC is hardcoded into the config file, but it is more secure to store API keys within environment variables.

    Recommendation

    Move the RPC to an environment variable.

    Link to I-02

More from USDT0

All 34 reports

  1. USAT Reconfiguration

     1 finding 1 finding: 1 low

  2. Stellar Deployment

     2 findings 2 findings: 2 informational

  3. Corn Network Delisting

     1 finding 1 finding: 1 low

  4. Canary Chain Configuration Verification

     4 findings 4 findings: 4 informational

Put your code through the same review.

This review started with a conversation about scope. Tell us what you are building and we will plan yours with you.

Get a quote