.svg)
Summary
The most critical subjects covered in our audit are the functional correctness of the attestation broadcast and the access control over the verifier and the deployer's administrative roles. The general subjects covered are event handling, error handling, code complexity, and documentation.
In summary, we find that the codebase provides a good level of security.
It is important to note that security audits are time-boxed and cannot uncover all vulnerabilities. They complement but don't replace other vital measures to secure a project.
About Sky LayerZero Governance DVN
Sky implements a cross-chain governance verification system that confirms a single message across three independent wings, Chainlink CCIP, a Sky-controlled multisig, and a quorum of independent LayerZero-aligned DVN providers, configured so that any two suffice and no single wing does. A set of deployment contracts deploys and wires these wings before handing control to Sky governance.