Dymension Point 0D audit
Audit · firm’s term: security audit
Oak Security reviewed Dymension (Dymension Point 0D audit) on 8 Mar 2024: 15 findings, 4 critical; 14 marked fixed, 1 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings15
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 4 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 1 | 9 |
CriticalDirectly sending funds to the txfees module can result in a denial-of-serviceFixed
The report gives no description here.
CriticalMsgEthereumTx EVM messages can be nested within a MsgExec message to bypass Ante handlers and steal transaction fees or perform a Denial-of-Service attackFixed
The report gives no description here.
CriticalThe invariant checking the last stream ID will break over time, potentially causing the chain to haltFixed
The report gives no description here.
CriticalUnbounded loop in PowApprox can be exploited to halt the chainFixed
The report gives no description here.
HighEVM contract addresses squatting via the vesting module resulting in non-functioning contracts and inaccessible fundsFixed
The report gives no description here.
LowA stream is incorrectly considered active after it has finishedFixed
The report gives no description here.
LowCLI commands for updating and replacing stream distributions are not registeredFixed
The report gives no description here.
LowCreateStream does not prevent startTime in the pastFixed
The report gives no description here.
LowErrors during fee swaps may result in an erroneous stateFixed
The report gives no description here.
LowErrors during stream distribution prevent the processing of other streamsFixed
The report gives no description here.
Show 4 more
LowInadequate validation of weights in DistrInfo creationFixed
The report gives no description here.
LowMissing message registration for Amino codecFixed
The report gives no description here.
LowNon-sequential stream creation during InitGenesis will cause invariant failureFixed
The report gives no description here.
LowRewards can be added to a finished gauge resulting in inaccessible fundsFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Dymension’s security record
DymensionSecurity firm
Oak Security33 projects reviewed · 60 reports · latest May 2026
See Oak Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us