All Reports
Download PDF
Swell HyperLiquid Forwarder
2025-06-09
Critical0
High1
Medium0
Low0
Info2
About the Protocol
Forwarder contract for bridging tokens between HyperEVM and HyperCore for Swell.
Findings (3)
H-01HighAcknowledged
The HYPE bridge address is hardcoded as the WHYPE bridge address
Bridge address mismatch between HYPE and WHYPE contracts.
I-01InfoAcknowledged
The arbitrary evmEOAToSendToAndForwardToL1 parameter allows sending tokens to wrong address
Unchecked forwarding parameter enables sending tokens to unintended recipients.
I-02InfoAcknowledged
No checks that the system address on HyperCore has sufficient supply
Missing supply verification on HyperCore system address during bridging.
Ready to Secure Your Project?
Let's discuss your project and ensure your security!