Assessment reports>Hyperliquid>Discussion>Possible improvements for contract transparency

Possible improvements for contract transparency

Currently, the address of the bridged token is held as a private variable in contract storage. We encourage Hyperliquid to consider making it public, which would let users more easily verify the asset bridged.

Additionally, nValidators is currently exposed for convenience, but it may inadvertently misrepresent the number of validators. For example, if multiple members of the validator set have the same address, the power of the validator is the sum of each occurrence's power. However, nValidators would count each occurrence separately.

Note: the visibility of the usdcToken variable containing the address of the bridged token was changed to public in commit .

Zellic © 2025Back to top ↑