INDEPENDENT CRASH TESTSTEST PROTOCOL PUBLISHED IN FULLRATINGS YOU CANNOT BUYEVERY REPORT DATED & RE-TESTEDPROTOCOLS TESTED ACROSS 12 CHAINSNEW: BRIDGE CRASH SERIES · READ NOW
← Safety Ratings
BULWARK CRASH REPORT · CR-1003

Across

Bridges & Cross-chain · Ethereum

Report statusValidVerificationVERIFIEDTested 5 Sept 2026 · Valid until 5 Mar 2027

Verdict Rating

4 of 5 · 78 / 100 overall

“The core controls hold, but the weakest area sets a clear ceiling on the rating.”

Rubric Breakdown

AreaScoreWeight
Depositor Protection7240%
Market Stress8325%
Exit & Liquidity7915%
Safety Assist8420%

Area scores

Depositor Protection72 / 100 · weight 40%
Sets the rating
Market Stress83 / 100 · weight 25%
Exit & Liquidity79 / 100 · weight 15%
Safety Assist84 / 100 · weight 20%

Test Evidence

Report IDCR-1003
Tested5 Sept 2026
Valid until5 Mar 2027
Fork blockEthereum - block 22274000
TVL at test$57.0M
Versionv4.2.0

Scenario Results

Open a scenario for its setup and recorded result.

Frontal DrainDegraded

Setup. Common attack classes are run against the deployment: reentrancy, rounding and precision, access control, flash loans, and donation attacks.

Recorded result. Common attack classes tested against the contracts.

Fork block
Ethereum - block 22274000
Reproduction script
Not published for this report.
Pole TestDegraded

Setup. One privileged key (admin, owner, or a single signer) is assumed leaked or misused.

Recorded result. Privileged key and upgrade path reviewed.

Fork block
Ethereum - block 22274000
Reproduction script
Not published for this report.
Side ImpactHeld

Setup. The oracle price is pushed ±30% for one block, or through a flash loan on the source pool.

Recorded result. Oracle stress and flash-loan price impact tested.

Fork block
Ethereum - block 22274000
Reproduction script
Not published for this report.
RolloverDegraded

Setup. The main collateral or stablecoin depegs to 0.80 for six hours.

Recorded result. Collateral depeg and liquidation path reviewed.

Fork block
Ethereum - block 22274000
Reproduction script
Not published for this report.
Rear ImpactDegraded

Setup. 30% of TVL is withdrawn within 24 hours by many addresses.

Recorded result. Exit queue and stressed withdrawal tested.

Fork block
Ethereum - block 22274000
Reproduction script
Not published for this report.

Findings

  • Depositor Protection is the limiting area at 72/100 and sets the rating.
  • 1 of five reviewed scenarios held; 4 recorded a degraded or failed result.
  • The reviewed deployment spans Ethereum and carries an overall weighted score of 78/100.
  • The report covers the tested contracts only; integrations outside that scope are not included.

Visual record

Schematic visual record · CR-1003One report.
Five scenarios.
One verdict.

Verified Resources

Limitations of Assessment

  • Scores reflect the deployment and chain set reviewed for this report.
  • On-chain metrics are measured at the test block and may move after publication.
  • The report covers the tested contracts, not integrations outside that scope.

Member Reports

Member Reports · not part of the rating0reports filed
Safety rating · set by the lab4 / 5Signed rating

Test History

ReportTestedVersionStars
CR-10035 Sept 2026v4.2.04 / 5

Protocol badge

BULWARK safety rating: Across, 4 of 5 stars

Embed this rating on the protocol site. The badge links back to this report.

<a href="https://bulwarkproof.tech/ratings/across/"><img src="https://bulwarkproof.tech/badge/across.svg" alt="BULWARK safety rating: Across, 4 of 5 stars" width="320" height="112"></a>
Signed by Test Director5 Sept 2026
MethodologyBULWARK Test Protocol v1.0
Fork blockEthereum - block 22274000

BULWARK · Tested · Unbuyable · Re-tested