CosmWasm Contracts

HalbornCode version: not recorded (see the report)

Audit · firm’s term: smart contract assessment

Halborn reviewed ORO (CosmWasm Contracts) on 30 Jul 2025: 6 findings, 0 critical; all marked fixed.

No open critical findings
Open the reportOpen ORO’s security record

Report hosted on halborn.com.

Trustblock does not review code.

Findings19

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium001
Low005

Marked Informational by the firm. Not counted as findings.

InformationalFormula deviation with reference contractsAcknowledged

The report gives no description here.

InformationalPermissionless decimal spoofingAcknowledged

The report gives no description here.

InformationalAsset info deduplication ignores the font caseFixed

The report gives no description here.

InformationalMalicious admin can seize all feesFixed

The report gives no description here.

InformationalMissing balance validation when bypassing amount checkFixed

The report gives no description here.

InformationalMissing guard against stale pending operationFixed

The report gives no description here.

InformationalMissing or incomplete instantiate attributesFixed

The report gives no description here.

InformationalOwner can confiscate future reward tokensFixed

The report gives no description here.

InformationalRedundant branch after minimum fee enforcement in funds splittingFixed

The report gives no description here.

InformationalSchedule-limit bypass via improper length checkFixed

The report gives no description here.

Show 3 more
InformationalUnbounded pagination in query endpointsFixed

The report gives no description here.

InformationalVesting schedules bypass validation when end_point is missingFixed

The report gives no description here.

InformationalVesting withdraw from active schedule leaves a single token unit in the scheduleFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of ORO’s security record

ORO
Audits3 audits by 1 firmLast audit Jun 2026, by Halborn.
Critical findingsNo open critical findingsAcross 3 reports.
Open ORO’s security record

Security firm

Halborn

36 projects reviewed · 80 reports · latest Oct 2026

See Halborn’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us