Sequence Smart Wallet

QuantstampFiles named in the report

Audit

Quantstamp reviewed Sequence (Sequence Smart Wallet) on 18 Feb 2021: 2 findings, 0 critical; all acknowledged, none fixed.

No open critical findings
Open the reportOpen Sequence’s security record

Report hosted on certificate.quantstamp.com.

Trustblock does not review code.

Findings2

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium000
Low020
LowMissing Return ValuesAcknowledged

Function `isValidSignature ` in `ModuleAuth` is missing a return statement for the else branch. While this does not pose a problem in the current system, a future potential caller attempting to decode the returned byte value may fail.

LowUnhandled OverflowsAcknowledged

As pointed by an internal code review of the 0xSequence wallet contributors, there are unhandled possible overflows on lines `LibBytes.sol#146` and `LibBytes.sol#185`. Quantstamp confirmed that the calls currently made to the functions in question cannot reach the overflow state, this does not need to be the case for future uses of these function.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (41)

  • contracts/modules/MainModuleUpgradable.sol
  • contracts/modules/commons/ModuleCreator.sol
  • contracts/interfaces/receivers/IERC1155Receiver.sol
  • contracts/mocks/LibBytesImpl.sol
  • contracts/interfaces/receivers/IERC223Receiver.sol
  • contracts/utils/SignatureValidator.sol
  • contracts/modules/commons/ModuleAuthFixed.sol
  • contracts/modules/MainModule.sol
  • contracts/modules/commons/interfaces/IModuleHooks.sol
  • contracts/modules/commons/interfaces/IModuleAuthUpgradable.sol
  • contracts/modules/commons/ModuleAuthUpgradable.sol
  • contracts/modules/commons/ModuleUpdate.sol
  • contracts/modules/GuestModule.sol
  • contracts/modules/commons/interfaces/IModuleAuth.sol
  • contracts/mocks/HookCallerMock.sol
  • contracts/mocks/GasBurnerMock.sol
  • contracts/modules/commons/interfaces/IModuleCalls.sol
  • contracts/modules/utils/SequenceUtils.sol
  • contracts/Wallet.sol
  • contracts/mocks/HookMock.sol
  • contracts/interfaces/IERC1271Wallet.sol
  • contracts/modules/commons/ModuleSelfAuth.sol
  • contracts/modules/commons/ModuleStorage.sol
  • contracts/modules/commons/Implementation.sol
  • contracts/utils/LibBytes.sol
  • contracts/utils/LibAddress.sol
  • contracts/Factory.sol
  • contracts/modules/commons/ModuleAuth.sol
  • contracts/modules/utils/MultiCallUtils.sol
  • contracts/modules/commons/ModuleHooks.sol
  • contracts/mocks/ERC165CheckerMock.sol
  • contracts/modules/utils/RequireUtils.sol
  • contracts/mocks/CallReceiverMock.sol
  • contracts/modules/commons/interfaces/IModuleUpdate.sol
  • contracts/modules/commons/ModuleERC165.sol
  • contracts/mocks/ModuleMock.sol
  • contracts/mocks/DelegateCallMock.sol
  • contracts/interfaces/receivers/IERC721Receiver.sol
  • contracts/migrations/Migrations.sol
  • contracts/modules/commons/ModuleCalls.sol
  • contracts/modules/commons/interfaces/IModuleCreator.sol

Part of Sequence’s security record

Sequence
Audits3 audits by 1 firmLast audit Dec 2025, by Quantstamp.
Critical findingsNo open critical findingsAcross 3 reports.
Open Sequence’s security record

Security firm

Quantstamp

236 projects reviewed · 332 reports · latest Oct 2026

See Quantstamp’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us