> For the complete documentation index, see [llms.txt](https://docs.wheelx.fi/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.wheelx.fi/safety-and-security/contract-audits-reports.md).

# Contract Audit Reports

WheelX smart contracts have been reviewed by independent third-party security firms. All audit reports are publicly available.

### Audited Contracts

The audit covers the core Solidity contracts in the [wheelx-contracts](https://github.com/wheelx-fi/wheelx-contracts/tree/main/src) repository:

| Contract                                                                                                 | Description                                                                                         |
| -------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------- |
| [ApprovalProxy.sol](https://github.com/wheelx-fi/wheelx-contracts/blob/main/src/ApprovalProxy.sol)       | Proxy contract handling token approvals and multicall operations                                    |
| [Multicall3Router.sol](https://github.com/wheelx-fi/wheelx-contracts/blob/main/src/Multicall3Router.sol) | Router contract integrating Multicall3 for batch operations and Permit2 for gas-efficient approvals |
| [WheelxReceiver.sol](https://github.com/wheelx-fi/wheelx-contracts/blob/main/src/WheelxReceiver.sol)     | Receiver contract for handling deposits and forwarding calls                                        |
| [MerkleWithdraw.sol](https://github.com/wheelx-fi/wheelx-contracts/blob/main/src/MerkleWithdraw.sol)     | Merkle Tree-based withdrawal contract supporting multiple tokens                                    |

Supporting libraries in [`src/libs/`](https://github.com/wheelx-fi/wheelx-contracts/tree/main/src/libs): `IRouter.sol`, `Panic.sol`, `Revert.sol`, `SafeApproveLib.sol`.

### Audit Reports

#### ABDK Consulting

|             |                                                                                                                                                |
| ----------- | ---------------------------------------------------------------------------------------------------------------------------------------------- |
| **Auditor** | ABDK Consulting                                                                                                                                |
| **Date**    | September 3, 2025                                                                                                                              |
| **Scope**   | WheelX Contracts v1.0                                                                                                                          |
| **Report**  | [ABDK\_WheelX\_WheelXContracts\_v\_1\_0.pdf](https://github.com/abdk-consulting/audits/blob/main/wheelx/ABDK_WheelX_WheelXContracts_v_1_0.pdf) |
| **Mirror**  | [wheelx-contracts/audits/](https://github.com/wheelx-fi/wheelx-contracts/tree/main/audits)                                                     |

### Source Code

All audited contract source code is open-source and publicly available:

* **Repository**: [github.com/wheelx-fi/wheelx-contracts](https://github.com/wheelx-fi/wheelx-contracts)
* **License**: MIT
* **Build tooling**: Foundry

### Deployments

Contracts are deployed with deterministic addresses across all supported chains:

| Contract         | Address                                      |
| ---------------- | -------------------------------------------- |
| ApprovalProxy    | `0x7eC9672678509a574F6305F112a7E3703845a98b` |
| Multicall3Router | `0x6222f99443A0d75bd96d40F2904606f60f37cdc2` |
| WheelxReceiver   | `0xB10F9Ec04A66b69E3831e1e5b1E6B9D41081B6CC` |

Supported networks include Ethereum, Optimism, Arbitrum, Base, Unichain, BNB Smart Chain, opBNB, Polygon, Linea, ZKSync, Mode, Lisk, Celo, Zora, Katana, Bob, Taiko, Scroll, HEMI, XLayer, HyperEVM, and Abstract.

### Responsible Disclosure

If you discover a vulnerability in WheelX contracts, please report it responsibly to the team before public disclosure.