Neutron Independent Chain audit
Oak Security reviewed Neutron (Neutron Independent Chain audit) on 25 Mar 2025: 35 findings, 2 critical; 26 marked fixed, 9 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings35
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 1 | 1 |
| High | 0 | 3 | 9 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 5 | 16 |
CriticalValidators receive lesser rewards due to incorrect reward denomFixed
The report gives no description here.
HighBlacklist feature does not account for block height, causing incorrect vote computationFixed
The report gives no description here.
HighBypassing the embedded filesystem causes file I/O errors on non-build machines, causing a denial of serviceFixed
The report gives no description here.
HighFailure to handle BeforeDelegationRemoved hook leads to stake inconsistencyFixed
The report gives no description here.
HighFailure to update user stake may cause excess reward distributionFixed
The report gives no description here.
HighIncorrect parameter passed during SudoMsg::AfterValidatorRemovedFixed
The report gives no description here.
HighIncorrect stake retrieval for LST protocols leads to zero rewardsFixed
The report gives no description here.
HighPotential incorrect delegation logic in StakeWithDropFixed
The report gives no description here.
HighUnbounded validator iteration causes potential out-of-gas errorsFixed
The report gives no description here.
HighValidator rewards are lost if the payment schedule is updatedFixed
The report gives no description here.
Show 10 more
LowFailure to check for contract existence in hook subscriptions may result in a chain halt or denial of serviceFixed
The report gives no description here.
LowFailure to handle error from SendCoinsFromModuleToModule allows execution to continue despite transfer failureFixed
The report gives no description here.
LowInconsistent provider definition in the Staking Info Proxy contract and documentationFixed
The report gives no description here.
LowIncorrect TWAP response returned from the PaymentInfo queryFixed
The report gives no description here.
LowLack of validation for TwapWindow can lead to recent price deletionFixed
The report gives no description here.
LowMissing enforcement of validator reward eligibility based on active set statusFixed
The report gives no description here.
LowMissing genesis state validation in x/revenueFixed
The report gives no description here.
LowMissing upper bounds limits in the neutron-staking-rewards contractFixed
The report gives no description here.
LowMissing validations in the x/harpoon moduleFixed
The report gives no description here.
LowNegative prices are not handledFixed
The report gives no description here.
Show 6 more
LowNew validator accounts are not pre-funded, potentially causing upgrade failureFixed
The report gives no description here.
LowPotential overflow during block interval calculationsFixed
The report gives no description here.
LowRounding discrepancy in before_validator_slashed leads to misestimation of slashed tokensFixed
The report gives no description here.
LowSuboptimal staking parameters affect IBC reliability,Fixed
The report gives no description here.
LowThe DAO address is not blocked from claimingFixed
The report gives no description here.
LowValidator rewards are lost due to possible fund shortagesFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Neutron’s security record
NeutronSecurity firm
Oak Security33 projects reviewed · 60 reports · latest May 2026
See Oak Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us