All Reports
Download PDF
Swell HyperLiquid Forwarder
2025-06-09
Critical0
High1
Medium0
Low0
Info2
About the Protocol
Forwarder contract for bridging tokens between HyperEVM and HyperCore for Swell.
Findings (3)
H-01HighAcknowledged
The HYPE bridge address is hardcoded as the WHYPE bridge address
Bridge address mismatch between HYPE and WHYPE contracts.
I-01InfoAcknowledged
The arbitrary evmEOAToSendToAndForwardToL1 parameter allows sending tokens to wrong address
Unchecked forwarding parameter enables sending tokens to unintended recipients.
I-02InfoAcknowledged
No checks that the system address on HyperCore has sufficient supply
Missing supply verification on HyperCore system address during bridging.
Ready to Secure Your Project?
Get a free 30-minute security assessment. We will review your codebase scope and flag the top 3 risk areas.
No commitment required. Typical audits start within 1–2 weeks.