Optimism Bedrock
June 2023
NFT Bounty reviewed Optimism Bedrock pieces across L2 system logic, untrusted input handling, serialization boundaries, and build-out safety. The engagement is a reference point for rollup teams looking at how malformed data, type handling, and boundary checks affect protocol correctness.
Engagement snapshot
The engagement spotted high-severity/high issues along with /low weaknesses that could affect robustness under adversarial conditions. NFT Bounty assessed Optimism Bedrock pieces with a focus on handling untrusted inputs, serialization boundaries, and implementation safety. The remediation guidance tightens protocol safety by tightening validation and reducing exploitability across core paths.
By the numbers
Total findings
14
High + high-severity findings
3
Scope we covered
-
Core Bedrock pieces
Security-relevant Bedrock paths in assessed smart contract and system logic.
-
Input handling
Validation and decoding behavior for untrusted and malformed external data.
-
Type and bounds safety
Plausible overflow and bounds-check weaknesses in severe code paths.
Related services
Looking for a security audit?
Book a scoping talk