github hyperlane-xyz/hyperlane-monorepo audit-q2-2026-prerelease

latest releases: @hyperlane-xyz/helloworld@30.0.0, @hyperlane-xyz/starknet-sdk@27.2.3, @hyperlane-xyz/sdk@30.0.0...
pre-release6 hours ago

What's Changed

  • feat(audit-q2): move CrossCollateral contracts into core solidity package by @nambrot in #8339
  • feat(audit-q2): move TokenBridgeOft into core solidity by @nambrot in #8341
  • feat: predicate router wrapper by @troykessler in #8262
  • feat: cherry-pick MinimalInterchainAccountRouter solidity changes by @paulbalaji in #8367
  • fix: exclude cross-collateral contracts from tron build by @nambrot in #8393
  • chore: Add distinct CCRF fee type by @nambrot in #8391
  • feat: add deposit-address token bridge adapter by @nambrot in #8377
  • feat(solidity): offchain fee quoting for IGP and warp routes by @yorhodes in #8357
  • fix: revert quoteTransferRemoteTo when routing fee contract is missing by @nambrot in #8460
  • feat(sdk): QuotedCalls client with quoteExecute by @yorhodes in #8416
  • fix(sdk/cli): CrossCollateral SDK fixes by @nambrot in #8423
  • fix(solidity): handle permit2 front-running gracefully in QuotedCalls by @yorhodes in #8492
  • fix(solidity): add reentrancy guard to QuotedCalls.execute by @yorhodes in #8493
  • fix: forward msg.value directly in AmountRoutingHook._postDispatch() by @yorhodes in #8399
  • fix(solidity): address minor audit suggestions [HL-2026Q2-000] by @yorhodes in #8496
  • fix(solidity): add quoteTransferRemote to PredicateRouterWrapper by @yorhodes in #8490
  • docs(solidity): document IGP postDispatch ERC20 approval risk by @yorhodes in #8495
  • fix(solidity): validate msg.value for native fee in transferRemoteWithAttestation by @yorhodes in #8487
  • fix(solidity): consistent fee token handling in ICA commit-reveal dispatch by @yorhodes in #8510
  • fix(solidity): use local amounts for fee quoting, outbound amounts for message bodies by @yorhodes in #8491
  • fix(solidity): revert stale standing quotes, skip equal issuedAt by @yorhodes in #8488
  • fix(solidity): WeightedMultisigIsm non-sequential signer bug by @yorhodes in #8483
  • fix(solidity): add native fee refund logic in PredicateRouterWrapper by @yorhodes in #8494
  • feat(sdk): add QuotedCalls to core deployment and offchain fee quoting modules by @yorhodes in #8405
  • feat(fee-quoting): deployment infra and offchain quoting config by @yorhodes in #8404
  • feat: predicate cross collateral wrapper by @troykessler in #8513

Full Changelog: https://github.com/hyperlane-xyz/hyperlane-monorepo/compare/@hyperlane-xyz/core@11.1.0...audit-q2-2026-prerelease

Don't miss a new hyperlane-monorepo release

NewReleases is sending notifications on new releases.