.svg)
Summary
The most critical subject of this review was the correctness of the generated payloads and, thus, the correctness of the instruction generation and codec implementations. Other topics covered include the completeness of the validation.
In summary, we find that the codebase achieves the desired outcome.
It is important to note that this assessment is not a security audit but rather a review of whether the programs achieve the desired outcome. Thus, running the code in isolated environments is recommended. Last, it is important to note that reviews are time-boxed and cannot uncover all vulnerabilities. They complement but don't replace other vital measures to secure a project.
About Solana Crosschain Governance Payload Scripts
Sky implements scripts for generating payloads for the Wormhole and LayerZero governance bridge to facilitate the migration from the Wormhole infrastructure to the new LayerZero infrastructure.