Solana Token Wrap Initial Review
Creation of "wrapped" versions of existing SPL tokens
Critical / High
Medium
Low / Informative
Report files
Audit lifecycle
Public reports represent completed engagements with finalized deliverables.
Completed
Scheduled
Scope, timeline, and review plan were agreed.
Completed
In Progress
Manual review and verification work were carried out.
Current stage
Completed
The engagement wrapped with a published final report.
Executive Summary
High-level assessment and conclusions
A concise overview of the audit scope, core findings, and the key outcomes from the engagement.
The audit evaluated the security and correctness of Anza’s Token Wrap program, which enables interoperability between SPL Token and SPL Token 2022 standards on Solana. Conducted by Runtime Verification from April 30 to May 28, 2025, with an extension from June 25 to July 2, the engagement assessed the system’s reliability and identified potential vulnerabilities. The review included manual code analysis and formal verification to validate the system’s behavior under various conditions. Findings addressed issues related to fund integrity, logic consistency, and best practices for code maintainability. All findings were either resolved or partially mitigated by the Anza team, with any remaining considerations deemed non-critical to the protocol’s overall security and stability.
Reports
Download the audit artifacts
Access the published PDF deliverables associated with this engagement.
PDF report 1
Token Wrap.pdf
Download the published report for this engagement.