Audit Open Original ↗
Chainlink Custom Senders and Receivers
Type
Security review
Client
Chainlink Labs
Date
2025-02
Domain
Blockchain
Effort
4 wks
Section
Other/Multi-Chain
Trail of Bits's security review of Chainlink Labs (Feb 2025) identified 7 issues: 1 high, 2 medium, 3 informational, and 1 undetermined.
Findings · 7
- 1 CustomSender only supports sending Wrapped Ether Informational
- 2 Lack of zero-value checks Informational
- 3 OraclePool has insolvency risks when LSTs are slashed High
- 4 Swapping at Chainlink prices will lead to CSR insolvency due to oracle timing discrepancy Medium
- 5 Price oracle fails to verify sequencer liveness Medium
- 6 Eigenpie deposit flow may be vulnerable to sandwiching attacks Undetermined
- 7 The CustomSender contract does not enforce minimum gas amounts when bridging Informational
Findings extracted from the published report PDF. See the full report below for details and remediation.
Related
