Pre-auditThree days of senior audit time for $1,500, credited in full toward your Zealynx audit.3 audit days, credited toward your auditSee how →
audits/client · 1 engagement

Bastion Wallet

Bastion Wallet is an open-source ERC-4337-compatible Account Abstraction SDK in TypeScript that abstracts away blockchain complexity, letting Dapps integrate decentralized multi-chain wallets and a subscription-based recurring payment system through Initiator and SubExecutor contracts.

Audits delivered
1since 2024
most recent · 2024-03-01
Total findings
10
Primary stack
Solidity
Ethereum

Engagement history

Mar 2024 · ongoing
Mar 2024
Bastion Wallet Account Abstraction SDK

All engagements

newest first · 1 report
Mar2024

Bastion Wallet Account Abstraction SDK

Zealynx co-audited Bastion Wallet's ERC-4337 Account Abstraction SDK alongside Shieldify Security, reviewing the Initiator and SubExecutor subscription contracts across 253 nSLOC and 4 files. The 6-day review by five researchers (three manual reviewers, two on fuzz testing with Halmos, Echidna and Foundry) identified 10 issues including 2 High-severity logic flaws in the subscription handling functions and the ERC-20 transfer flow. All findings were acknowledged and fixed as suggested.

0C2H3M5L0IEthereumSolidityaccount-abstractionerc-4337subscription
All fixed

Why this page exists

When someone asks “is Bastion Wallet really audited?”, this is the page to send them. Every engagement we’ve delivered, in one place, with the artifacts.

internal docs · zealynx

Quick facts

Client since2024
Engagement1
SLOC reviewed~253
Findings identified10
Critical + high2
Latest commit79cddfeb
MethodologyZealynx audit methodology →
ZEALYNX SECURITY · client hub · bastion-wallet
1 engagement · 2024