Somnia dreamDEX / Dream-Dex
Hacken reviewed Somnia (Somnia dreamDEX / Dream-Dex) on 20 May 2026: 31 findings, 0 critical; 22 marked fixed, 7 acknowledged, 2 open.
Report hosted on hacken.io.
Trustblock does not review code.
Findings31
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 2 |
| Medium | 1 | 0 | 2 |
| Low | 1 | 7 | 18 |
HighUnbounded Loop in onEvent Combined With No-Retry Precompile Semantics Enables Griefing of Stop-Order ExecutionFixed
The report gives no description here.
HighUnchecked Addition in _checkAndEmitMidpointChange Leads to Permanent Denial of Service on Bid OperationsFixed
The report gives no description here.
MediumTiny Partial Fills Can Truncate Quote To Zero — Taker Receives Base Without PayingFixed
The report gives no description here.
MediumUnsmoothed SpotPool Midpoint Enables Midpoint-Manipulation Sandwich AttacksFixed
The report gives no description here.
Low_depositFor Credits Balance Before Pulling TokensFixed
The report gives no description here.
LowAbsence of Validation in freeOrderIndex Allows Silent Double-Free Leading to State CorruptionFixed
The report gives no description here.
LowChecked Arithmetic Overflow in absInt256 Causes Revert for type(int256).minFixed
The report gives no description here.
LowcreatePendingOrder Silently Accepts Overpayment of SOMI, Forfeiting Excess to Admin on TriggerFixed
The report gives no description here.
LowMarket Pending Orders Accept Arbitrary limitPrice Which Is Silently Ignored on TriggerFixed
The report gives no description here.
LowMissing Event Emission Prevents Off-Chain Monitoring of Sensitive Admin ActionsFixed
The report gives no description here.
Show 10 more
LowMissing Reentrancy Guard in _processStopOrdersForOperator Results in Latent Double-Free and DoS SurfaceFixed
The report gives no description here.
LowMissing Zero-Index Guards in insertOrder and addOrder Allow Sentinel-Slot CorruptionFixed
The report gives no description here.
LowMissing Zero-Value Checks for tickSize and lotSize in updateOrderBookParametersFixed
The report gives no description here.
LowonEvent Does Not Gate on activeSubscriptionIdFixed
The report gives no description here.
LowPermissive Native Token Guard in placeTakerOrderWithoutVault Leads to Permanent Stranding of ETHFixed
The report gives no description here.
LowPremature Index Freeing in _matchOrderToBook Causes Transient Invariant Violation Between Free Stack and Priority ListFixed
The report gives no description here.
LowreduceOrder Does Not Validate That the Target Order Is Still Live and Allows Mutation of Expired OrdersFixed
The report gives no description here.
LowTaker Fee Charged From Free Balance Causes Deterministic RevertFixed
The report gives no description here.
LowTautological msg.value Check in Native Token _safeTransferFromFixed
The report gives no description here.
LowUnbounded Matching Loop Enables Expired-Order Cleanup Gas GriefingFixed
The report gives no description here.
Show 2 more
LowUnbounded Multiplication in getBpsOfValueCeil and getBpsOfValueFloor Can Revert on Extreme InputsFixed
The report gives no description here.
LowZero-Amount _transfer Calls in _onOrderRemoved Cause Unnecessary Gas ConsumptionFixed
The report gives no description here.
Contracts in scope3
| Address | Chain | Source code |
|---|---|---|
| 0x47636b3188774a3e7273d85a537b9ba4ee7b2535 | Chain: Base | Source code: Verified source |
| 0xa9616e5e23ec1582c2828b025becf3ef610e266f | Chain: BNB Chain | Source code: Verified source |
| 0x1b0f6590d21dc02b92ad3a7d00f8884dc4f1aed9 | Chain: Ethereum | Source code: Verified source |
Part of Somnia’s security record
SomniaSecurity firm
Hacken343 projects reviewed · 476 reports · latest Sep 2026
See Hacken’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us