🛡️Security audits

CrossCurve Consensus Bridge CDP Security Audit Report by MixBytes

CrossCurve CDP (Cross-Chain Data Protocol) is a messaging protocol designed for cross-chain data transfers, utilizing multiple projects like LayerZero, Axelar Bridge and CrossCurve Bridge. This security audit covers the latest updates to the protocol logic, including the integration of Router Protocol as an additional cross-chain messaging layer.

May 06 2026

Dec 15 2025

Eywa CDP Security Audit Report.pdf

🔗 Link to MixBytes EYWA reports.

CrossCurve DAO Security Audit Report by MixBytes

1. Project architecture review:

Build an independent view of the project's architecture.
Identifying logical flaws.

2. Checking the code in accordance with the vulnerabilities checklist:

Eliminate typical vulnerabilities (e.g. reentrancy, gas limit, flash loan attacks etc.).

3. Checking the code for compliance with the desired security model:

Detect inconsistencies with the desired model.

4. Consolidation of the auditors' interim reports into one:

Double-check all the found issues to make sure they are relevant and the determined threat level is correct.
Provide the Client with an interim report.

5. Bug fixing & re-audit:

Verify the fixed code version with all the recommendations and its statuses.
Provide the Client with a re-audited report.

6. Final code verification and issuance of a public audit report:

Conduct the final check of the code deployed on the mainnet.
Provide the Customer with a public audit report.

Eywa DAO Security Audit Report.pdf 🔗 Link to MixBytes EYWA reports.

CrossCurve CLP security audit by MixBytes

A group of auditors are involved in the work on the audit. Security engineers check the provided source code independently of each other in accordance with the methodology described below:

1. Project architecture review:

Build an independent view of the project's architecture.
Identifying logical flaws.

2. Checking the code in accordance with the vulnerabilities checklist: Eliminate typical vulnerabilities (e.g. reentrancy, gas limit, flash loan attacks etc.).

3. Checking the code for compliance with the desired security model:

Detect inconsistencies with the desired model.

4. Consolidation of the auditors' interim reports into one:

Double-check all the found issues to make sure they are relevant and the determined threat level is correct.
Provide the Client with an interim report.

5. Bug fixing & re-audit:

Verify the fixed code version with all the recommendations and its statuses.
Provide the Client with a re-audited report.

6. Final code verification and issuance of a public audit report:

Conduct the final check of the code deployed on the mainnet.
Provide the Customer with a public audit report.

Eywa CLP Security Audit Report.pdf

🔗 Link to MixBytes EYWA reports.

CrossCurve CDP security audit by Smartstate

The core architectural element of the CrossCurve ecosystem is the CrossCurve Cross-chain Data Protocol, which is a transport layer between blockchains. All CrossCurve products for DeFi users are based on this protocol.

Although at the time of this audit the core of CrossCurve multisig is represented by a trusted group of projects, CrossCurve aims for DAO, as reflected in CrossCurve project current documentation.

CDP Smart Contracts: These smart contracts serve as a means for sending and accepting cross-chain calls. They also include a node registration contract used in the Proof of Authority (POA) consensus among oracle nodes.

Smart State evaluation: 8/10

EYWA_CDP_SС_report.pdf CDP report from SmartState

Security audits by Smartstate

2026 - Audit of smart contracts for connecting CrossCurve MetaLayer with the Bungee aggregator.

CrossCurve Cross-chain Liquidity Protocol ensures the operation of EYWA DEX v1

CLP smart contracts - are smart contracts for processing synth and burn operations, as well as mint and lock tokens. They are also responsible for swap processing and liquidity handling operations.

Smart State evaluation: 10/10

🔗 Link to SmartState CrossCurve reports.

Security audits by Hexens

2026 - smart contract audit of the CrossCurve OFT protocol. No critical vulnerabilities found, all recommendations have been addressed.

The Hexens team audited various components of CrossCurve, such as the BLS cryptography module in CrossCurve CDP as well as EYWA NFT.

PreviousTreasury NextTeam

Last updated 2 months ago