Independent Review
Public reports make the reviewed scope, methodology, and findings available for anyone to inspect.
Covered
Completion date
August 5, 2026
Credshields assessment identified a total of 34 findings, none of which were Critical. The findings include 3 High-severity issues, 11 Medium-severity issues, 12 Low-severity issues, and 8 Informational observations. Upon retest, 30 of the original 34 findings were confirmed as fixed, demonstrating progress in addressing the identified vulnerabilities. The remaining 4 findings have been acknowledged by the Surge team.
Covered
Completion date
July 22, 2026
Ngu Services LLC principal Brandon Black (@reardencode) reviewed and audited the Surge Credit system. After prompt remediation of initial findings, the system is found to be free of material defects in security or suitability within the audit scope and the abilities of the auditor. The Surge Credit on-chain contract, relayer API and logic, and signer interactions were reviewed in detail.
