Skip to content
$1,000,000 in security audit grants are live now, Apply here →

Security review · September 2025

X Layer Deployment

for USDT0

Guardian's review of X Layer Deployment for USDT0, published September 2025. The report records 1 finding, including 1 informational.

Published
Review window
September 3 to 4, 2025
Language
Solidity
Chains
Ethereum
Sector
Stablecoins, Cross-chain
  • 0 Critical
  • 0 High
  • 0 Medium
  • 0 Low
  • 1 Informational

1 acknowledged

Findings 1

  1. I-01 Informational Proxy & Admin Bytecode Inconsistency Best Practices Acknowledged
    Location
    Global

    Description

    The deployed proxy/admin bytecode does not align with our local builds or with deployments on other chains.

    • Current deployment: Solidity 0.8.9 with 200 optimization runs.
    • Other deployments: Solidity 0.8.10 with 100,000 runs or 0.8.4 with 100,000 runs.
    • Additionally, these contracts appear to rely on different OpenZeppelin library versions. Although the Hardhat Upgrades plugin uses precompiled proxies (which means proxy bytecode itself is not influenced by the compiler version of implementation contracts), the inconsistency in compiler versions, optimization runs, and dependency versions introduces potential risks:
    • Divergent bytecode may hinder verification and reproducibility.
    • Inconsistent compiler settings can introduce subtle behavioral differences.

    Recommendation

    • Pin the compiler version and optimization settings across all deployments to ensure bytecode uniformity.
    • Align dependency versions, particularly OpenZeppelin libraries, to avoid unexpected behavioral differences.
    • Lock the upgrades plugin version to maintain consistency of proxy/admin contracts across environments.

More from USDT0

All 34 reports
  1. USAT Reconfiguration

    1 finding 1 finding: 1 low
  2. Stellar Deployment

    2 findings 2 findings: 2 informational
  3. Corn Network Delisting

    1 finding 1 finding: 1 low
  4. Canary Chain Configuration Verification

    4 findings 4 findings: 4 informational

Put your code through the same review.

This review started with a conversation about scope. Tell us what you are building and we will plan yours with you.

Get a quote