About Sky LZ Init Lib
Sky implements a Solidity library for configuring LayerZero v2 infrastructure (peer wiring, message-library selection, DVN and executor configuration, OFT rate limits) from within Sky governance spells, and a companion helper contract that exposes the same library on L2 via the Sky cross-chain governance relay. In Version 3 , a one-off library for the Avalanche OFT and governance migration was added. In Version 4 , support for activating SSR oracle forwarders was added, and the use of the shared CCIP DVN adapter was made optional when wiring a new governance peer.
Audit Summary
The subjects covered in our audit are functional correctness, completeness of operations and documentation.
In summary, we find that the codebase provides a good level of security. Note that the library configures contracts which are deployed and pre-configured outside of governance, and that its on-chain checks can confirm only that expected values are present, not that unexpected ones are absent.
The correctness of those deployments therefore rests on Sky's off-chain review, see Deployment Verification.
It is important to note that security audits are time-boxed and cannot uncover all vulnerabilities. They complement but don't replace other vital measures to secure a project.