Somnia dreamDEX / Dream-Dex

Hacken3 addresses on Ethereum, BNB Chain and Base

Hacken reviewed Somnia (Somnia dreamDEX / Dream-Dex) on 20 May 2026: 31 findings, 0 critical; 22 marked fixed, 7 acknowledged, 2 open.

No open critical findings
Open the reportOpen Somnia’s security record

Report hosted on hacken.io.

Trustblock does not review code.

Findings31

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High002
Medium102
Low1718
Low_checkAndEmitMidpointChange Runs Redundantly After Every Fill, Removal, and Book InsertionAcknowledged

The report gives no description here.

LowcancelOrder Emits OrderExpired Instead of OrderCancelled When a User Explicitly Cancels an Already-Expired OrderAcknowledged

The report gives no description here.

LowplaceOrderFor Accepts an Arbitrary Owner With No Per-User Consent or Opt-In MechanismAcknowledged

The report gives no description here.

LowreduceOrder Validates Against Current minQuantity and lotSize, Enabling Admin to Force All-or-Nothing CancellationAcknowledged

The report gives no description here.

LowRedundant uint64() Cast on currentTimestampNs()Acknowledged

The report gives no description here.

LowUnbounded and Untimelocked setSlippageToleranceBps in SpotStopOrderRegistry Enables Admin MEV Extraction From MARKET Stop OrdersAcknowledged

The report gives no description here.

LowUnused oneQuote Storage Variable Wastes a Storage SlotAcknowledged

The report gives no description here.

Contracts in scope3

AddressChainSource code
0x47636b3188774a3e7273d85a537b9ba4ee7b2535Chain: BaseSource code: Verified source
0xa9616e5e23ec1582c2828b025becf3ef610e266fChain: BNB ChainSource code: Verified source
0x1b0f6590d21dc02b92ad3a7d00f8884dc4f1aed9Chain: EthereumSource code: Verified source

Part of Somnia’s security record

Somnia
Audits2 audits by 1 firmLast audit May 2026, by Hacken.
Critical findingsNo open critical findingsAcross 2 reports.
Open Somnia’s security record

Security firm

Hacken

343 projects reviewed · 476 reports · latest Sep 2026

See Hacken’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us