Selfchain audit

Oak SecurityCode version: not recorded (see the report)

Oak Security reviewed Selfchain (Selfchain audit) on 18 Jun 2025: 16 findings, 1 critical; 6 marked fixed, 10 acknowledged.

1 critical acknowledged, not fixed
Open the reportOpen Selfchain’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings16

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical010
High023
Medium000
Low073
CriticalUsers will not receive vested funds due to insufficient module balancesAcknowledged

The report gives no description here.

HighPermanent token freeze due to cliff > durationAcknowledged

The report gives no description here.

HighUnchecked error in the msg_server_migrate token transfer operationAcknowledged

The report gives no description here.

LowCentralized admin control over token mintingAcknowledged

The report gives no description here.

LowExcess tokens remain in the moduleAcknowledged

The report gives no description here.

LowHardcoded GetParams ignores stored parametersAcknowledged

The report gives no description here.

LowMissing configuration validation in the UpdateConfig functionAcknowledged

The report gives no description here.

LowMissing event emissionsAcknowledged

The report gives no description here.

LowNo mechanism to update ACL adminAcknowledged

The report gives no description here.

LowPotential division by zero during vesting calculationsAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Selfchain’s security record

Selfchain
Audits1 audit by 1 firmLast audit Jun 2025, by Oak Security.
Critical findings1 critical acknowledged, not fixedReported in “Selfchain audit” by Oak Security, Jun 2025. The team acknowledged it.
Open Selfchain’s security record

Security firm

Oak Security

33 projects reviewed · 60 reports · latest May 2026

See Oak Security’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us