adi logo

ADI Chain Completes Smart Contract Security Audits with Hacken

3 min read
ADI completes Smart Contract Security Audits with Hacken

ADI Chain has completed a series of smart contract security audits conducted by Hacken, a blockchain security firm that has worked with over 1,500 organizations since 2017, including the European Commission, ADGM, MetaMask, and the Ethereum Foundation.

The audits covered three smart contract components within the ADI Chain infrastructure.

The first is Certificate Storage, a contract that anchors verifiable records onchain. It supports ADI Chain's identity and credential verification use cases, where institutions need tamper-resistant proof of document authenticity without exposing sensitive data.

The second is WADI, ADI Chain's ERC-20 token contract. WADI powers gas, settlement, and execution across the network, so the security of this contract affects every transaction processed on ADI Chain.

The third is the Gasless Paymaster, an ERC-4337 (account abstraction) paymaster that sponsors gas fees on behalf of users. This contract enables gasless transactions and is important to making onchain interaction practical for institutions and end users who should not need to manage gas mechanics directly.

All three audits have been completed and the reports are publicly available on Hacken's website.

Context

ADI Chain is built to serve as settlement infrastructure for governments and financial institutions operating in regulated environments. In that context, independent security validation is a baseline requirement.

The contracts that were audited are not peripheral. They handle how credentials get verified onchain, how the network's utility token operates, and how gas is abstracted away from end users. A vulnerability in any of them would carry real consequences for institutional workflows.

Hacken's methodology combines automated tools with manual analysis by experienced engineers, following established frameworks including NIST SP 800-115 and the Penetration Testing Execution Standard (PTES). The audit process includes an initial review, a remediation cycle where identified issues are addressed by the development team, and a final verification pass.

What the Audits Covered

For each contract, Hacken's team reviewed the Solidity source code to identify security issues, logic flaws, and potential attack vectors. Findings were categorized by severity, from critical vulnerabilities that could lead to loss of funds down to lower-severity items related to gas efficiency and best-practice deviations.

In the case of the Gasless Paymaster audit, 16 findings were identified during the initial review. All 16 were resolved before the final report was issued on February 24, 2026. The full findings and their resolutions are documented in the public report.

The WADI (ERC-20) audit was completed on February 13, 2026, with 7 findings. The Certificate Storage audit was completed on January 30, 2026, with 4 findings. Both audits are marked as completed.

Security in the Context of Regulated Infrastructure

For the institutions and government partners that ADI Chain is designed to serve, security audits are part of a broader due diligence process. They provide external, independent confirmation that the smart contracts underpinning the network have been reviewed against known vulnerability classes and that identified issues have been addressed.

This is especially relevant given ADI Chain's role as the settlement layer for the UAE Dirham-backed stablecoin (DDSC), initiated by IHC and First Abu Dhabi Bank and licensed by the UAE Central Bank. When regulated value flows through onchain infrastructure, the integrity of that infrastructure has to be independently verifiable.

These audits are one component of that assurance. As Hacken notes in its own reporting, smart contracts operate within broader platform environments that carry their own risks, so no audit represents a guarantee of absolute security. What the audits do confirm is that the reviewed code has been subjected to independent scrutiny and that the ADI Chain team resolved the issues identified during the process.

Audit Reports

The full audit history and reports for ADI Chain are publicly accessible on Hacken's platform:

View ADI Chain Audits on Hacken

About Hacken

Hacken is a blockchain security and compliance firm that provides smart contract audits, penetration testing, and related security services for digital asset projects. Founded in 2017, the company holds ISO 27001:2022 certification and has completed over 1,500 engagements across the Web3 ecosystem.

Website: https://hacken.io

About ADI Chain

ADI Chain is an institutional Layer 2 blockchain for stablecoins and real-world assets, providing settlement infrastructure for the UAE Dirham-backed stablecoin (DDSC) initiated by IHC and First Abu Dhabi Bank, licensed by the UAE Central Bank. The network is built on Ethereum and zkSync, designed for compliance and institutional-grade security across the Middle East, Africa, and Asia.

Website: https://www.adi.foundation


WE'RE BUILDING THE INFRASTRUCTURE FOR A MORE ACCESSIBLE BLOCKCHAIN FUTURE

Reach out and get involved.
BUILD WITH US