EVM-CCTP Integration

Wormhole

Audit Summary

Protocol:

Wormhole

Date:04/09/2024

Auditor:

Cyfrin

Type:Smart Contract

Category:

Infrastructure

Ecosystem:

Move

EVM

Download Report

Total Findings: 13

High 0

Medium 2

Low 3

Informational 8

Governance 0

Medium

2 findings (15.4%)

Low

3 findings (23.1%)

Informational

8 findings (61.5%)

Description

Cyfrin audited Wormhole’s EVM-CCTP Integration report on April 9, 2024, under the Infrastructure category, identifying 13 issues in total.

This review of the Wormhole CCTP integration contracts yielded two medium-severity findings, with one relating to the potential malicious application of the otherwise relatively opaque Circle blacklist and another that raises an oversight in validating the target recipient address.