Contract Audit Reports

WheelX smart contracts have been reviewed by independent third-party security firms. All audit reports are publicly available.

Audited Contracts

The audit covers the core Solidity contracts in the wheelx-contracts repository:

Contract	Description
ApprovalProxy.sol	Proxy contract handling token approvals and multicall operations
Multicall3Router.sol	Router contract integrating Multicall3 for batch operations and Permit2 for gas-efficient approvals
WheelxReceiver.sol	Receiver contract for handling deposits and forwarding calls
MerkleWithdraw.sol	Merkle Tree-based withdrawal contract supporting multiple tokens

Supporting libraries in src/libs/: IRouter.sol, Panic.sol, Revert.sol, SafeApproveLib.sol.

Audit Reports

ABDK Consulting

Auditor	ABDK Consulting
Date	September 3, 2025
Scope	WheelX Contracts v1.0
Report	ABDK_WheelX_WheelXContracts_v_1_0.pdf
Mirror	wheelx-contracts/audits/

Source Code

All audited contract source code is open-source and publicly available:

• Repository: github.com/wheelx-fi/wheelx-contracts
• License: MIT
• Build tooling: Foundry

Deployments

Contracts are deployed with deterministic addresses across all supported chains:

Contract	Address
ApprovalProxy	0x7eC9672678509a574F6305F112a7E3703845a98b
Multicall3Router	0x6222f99443A0d75bd96d40F2904606f60f37cdc2
WheelxReceiver	0xB10F9Ec04A66b69E3831e1e5b1E6B9D41081B6CC

Supported networks include Ethereum, Optimism, Arbitrum, Base, Unichain, BNB Smart Chain, opBNB, Polygon, Linea, ZKSync, Mode, Lisk, Celo, Zora, Katana, Bob, Taiko, Scroll, HEMI, XLayer, HyperEVM, and Abstract.

Responsible Disclosure

If you discover a vulnerability in WheelX contracts, please report it responsibly to the team before public disclosure.