Coinbase: 200ms blocks
Cantina reviewed Base (Coinbase: 200ms blocks) on 1 Oct 2026: 3 findings, 0 critical; all marked fixed.
Report hosted on cantina.xyz.
Trustblock does not review code.
Findings3
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 0 | 3 |
Marked Informational by the firm. Not counted as findings.
InformationalAn additional BaseTime update can diverge from the claimed block timeAcknowledged
The report gives no description here.
InformationalBaseTime metadata can be accepted before Denim activationAcknowledged
The report gives no description here.
InformationalBaseTime predeploy activation does not pin the proxy runtime to its canonical code hashAcknowledged
The report gives no description here.
InformationalInconsistent integer overflow handling across the three millisecond timestamp computationsAcknowledged
The report gives no description here.
InformationalOnchain intermediate interval is not pinned to the ZK prover sampling cadenceAcknowledged
The report gives no description here.
InformationalSequencer and verifier disagree on a zero activation timestampAcknowledged
The report gives no description here.
InformationalSpeedup activation trusts schedule index 13 without binding it to DenimAcknowledged
The report gives no description here.
InformationalThe first transaction can read the previous Denim timeAcknowledged
The report gives no description here.
InformationalOff by one in the per height block retention capFixed
The report gives no description here.
InformationalPending transaction millisecond metadata depended on request orderFixed
The report gives no description here.
Show 2 more
InformationalQueued reorgs can overwrite an earlier proof history unwindFixed
The report gives no description here.
InformationalStaged sync does not enforce the Denim timestamp scheduleFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Base’s security record
BaseSecurity firm
Cantina37 projects reviewed · 175 reports · latest Oct 2026
See Cantina’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us