| Severity | Tool | Title | Validated | Confirmed |
|---|---|---|---|---|
| critical | codex | Unprotected init() lets attacker become admin/executor and drain bridge funds | no | — |
| high | detector | Authorization based on tx.origin | no | — |
| medium | detector | Untrusted CALL target/value reachable | no | no |
| medium | detector | ETH value transfer possible | no | no |
| Run ID | Status | Validated | Total findings | Created |
|---|---|---|---|---|
| 66199f28-d28d-4899-b8fd-5a726218d9b3 | complete | crit 0 high 0 | 4 | 3 months ago |