F-2025-0010·configuration

Fixed gas limits in LayerZero cause transaction and fund locks

Acknowledgedtypescriptwidgetrouter-api
TL;DR

Hardcoded gas limits in the LayerZero integration could cause transactions to fail and bridged funds to lock if the destination chain's gas profile changed.

Severity
LOW
Impact
MEDIUM
Likelihood
LOW
Method
MManual review
CAT.
Complexity
LOW
Exploitability
LOW
02Section · Description

Description

The LayerZero integration used hardcoded gas limits on the destination side. If the destination chain's gas profile shifted (opcode reprice, congestion, application change), bridged messages could fail to execute and funds could be stuck pending manual rescue.

03Section · Recommendation

Recommendation

Make destination gas limits configurable per route and per message type. Add adaptive gas estimation, or expose a re-execution path that lets users supply a fresh gas limit if the initial value is insufficient.

Initia: Acknowledged. Pashov Audit Group: Acknowledged.

F-2025-0010