Wormhole: Boundless Receiver audit report
Project Information
CATEGORY
Smart Contracts
NETWORK
Ethereum
WEBSITE
https://wormhole.com/
DESCRIPTION
From Aug. 11, 2025 to Aug. 13, 2025, Wormhole engaged Veridise to conduct a security assessment of their Boundless Transceiver. The security assessment covered two smart contracts surrounding a system of storing Ethereum beacon chain block roots. Veridise conducted the assessment over 6 person-days, with 2 security analysts reviewing the project over 3 days. The review strategy involved a tool-assisted analysis of the program source code performed by Veridise security analysts as well as a thorough code review
Audit Report
SCOPE
The scope of this security assessment is limited to the src/ folder of the source code provided by the Boundless Transceiver developers, which contains the smart contract implementation of the Boundless Transceiver.