Summary
The most critical subjects covered in our audit are functional correctness, signature handling, and access control. Security regarding all the aforementioned subjects is high. All issues identified in the intermediate reports have been resolved.
The general subjects covered are front-running, and gas efficiency. Some user operations may revert due to front-running, see Deposit with Permit / Authorization Is Susceptible to Griefing Attacks.
In summary, we find that the codebase provides a good level of security.
It is important to note that security audits are time-boxed and cannot uncover all vulnerabilities. They complement but don't replace other vital measures to secure a project.
About Circle Gateway Smart Contracts
Circle implements a set of smart contracts for Circle Gateway, a crosschain primitive that enables the bridging and aggregation of user's liquidity on any target chain with low latency.