Back to Overview

Sky LZ Init Lib

Quotation mark icon

ChainSecurity has been an invaluable partner throughout years of high-stakes product launches. We prize them for their proactivity, consistency & flexibility—we’re looking forward to continuing the partnership!

Deniz Yilmaz
Tech Lead (Sky)

About Sky LZ Init Lib

Sky implements a Solidity library for configuring LayerZero v2 infrastructure (peer wiring, message-library selection, DVN and executor configuration, OFT rate limits) from within Sky governance spells, and a companion helper contract that exposes the same library on L2 via the Sky cross-chain governance relay. In Version 3 , a one-off library for the Avalanche OFT and governance migration was added. In Version 4 , support for activating SSR oracle forwarders was added, and the use of the shared CCIP DVN adapter was made optional when wiring a new governance peer.

Audit Summary

The subjects covered in our audit are functional correctness, completeness of operations and documentation.

In summary, we find that the codebase provides a good level of security. Note that the library configures contracts which are deployed and pre-configured outside of governance, and that its on-chain checks can confirm only that expected values are present, not that unexpected ones are absent.

The correctness of those deployments therefore rests on Sky's off-chain review, see Deployment Verification.

It is important to note that security audits are time-boxed and cannot uncover all vulnerabilities. They complement but don't replace other vital measures to secure a project.