Mixed-decimals math without explicit scaling
Axelar Network's assessment for RD-F-017 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Code4rena 2023-07 flagged cross-chain decimal handling causing fund loss as a MEDIUM finding in the ITS. This was remediated; Ackee 2025-01 post-remediation ITS audit covers the fixed code. The gateway core itself (lock/unlock of native tokens) does not perform complex cross-decimal arithmetic. Yellow: historical medium finding since remediated.
Sources #
- AuditCode4rena 2023-07 - Decimal Handling MediumCode4rena 2023-07 MEDIUM: cross-chain decimal handling causing fund loss in ITSretrieved 2026-05-17
- Ackee 2025-01 ITS - Decimal Handling RemediationAckee 2025-01 ITS audit confirming remediation of decimal handlingretrieved 2026-05-17
Methodology #
Determine whether shared numerator/denominator arithmetic operates over tokens with different decimals without WAD/RAY normalization or explicit decimal-adjustment.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol axelar factor RD-F-017 score yellow collected_at 2026-05-16 21:57:49