Decent

Cross-chain Swaps|1,500 LOC|4H + 5M = 9 findings|Repo

Tool Results

Official Findings (9)

H-01Anyone can update Router address in DcntEth to any address

H-02Missing checks on minimum gas through LayerZero

H-03When DecentBridgeExecutor.execute fails, funds sent to random address

H-04Users lose cross-chain tx if destination router has insufficient WETH

M-01Permanent loss of tokens if swap data gets outdated

M-02Users can use protocol freely without paying fees

M-03Missing access control on UTB:receiveFromBridge

M-04Potential loss of capital due to fixed fee calculations

M-05Refunded ETH stuck in DecentBridgeAdapter