Mantle security review
Sigma Prime reviewed Mantle Network (Mantle security review) on 1 Jul 2023: 38 findings, 1 critical; 23 marked fixed, 15 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings38
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 3 | 2 |
| Medium | 0 | 3 | 5 |
| Low | 0 | 9 | 15 |
CriticalElected TSS Nodes Can Act Without Any DepositFixed
The report gives no description here.
HighDefault Values & Out-of-Bounds Panics In Merkle Tree ImplementationFixed
The report gives no description here.
HighElected TSS Nodes Can Avoid Slashing By Having Insufficient DepositsFixed
The report gives no description here.
MediumIncorrect Error Returned With Empty SignatureFixed
The report gives no description here.
MediumLack Of Array Size Checks Before Slicing Or Referencing Array ElementsFixed
The report gives no description here.
MediumLack Of Signature Size Verification ChecksFixed
The report gives no description here.
MediumLack Of Size Checks In createUUID() FunctionFixed
The report gives no description here.
MediumTSS Nodes Reporting Slashing Are Vulnerable To Front RunningFixed
The report gives no description here.
LowHardcoded Addresses Of BIT TokenFixed
The report gives no description here.
LowhashAfterPops() Uses Incorrect LengthFixed
The report gives no description here.
Show 10 more
LowIf TSS Nodes Fall Below Quorum Size No TSS Decisions Can Be MadeFixed
The report gives no description here.
LowMissing Zero Address Checks In Checkpoint OracleFixed
The report gives no description here.
LowMnemonic Cannot Be Used Without Supplying Private KeyFixed
The report gives no description here.
LowNil Pointer Panic If DTL Returns Malformed DataFixed
The report gives no description here.
LowSequencer Address Updates Can Immobilise ContractFixed
The report gives no description here.
LowTSS Node Clients Have Unreachable Max Connection Attempts LogicFixed
The report gives no description here.
LowTSS Node Design UncertaintyFixed
The report gives no description here.
LowTSS Nodes Can Report Themselves For Slashing To Reduce PenaltyFixed
The report gives no description here.
LowTSS Nodes Could Be Paid The Same Fee TwiceFixed
The report gives no description here.
LowUnhandled Panic If Metadata Is Set To NilFixed
The report gives no description here.
Show 3 more
LowUnreachable Error Handling In Proxyd CacheFixed
The report gives no description here.
LowUnused Items in StructuresFixed
The report gives no description here.
LowWaitgroup Counter Not IncrementedFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Mantle Network’s security record
Mantle NetworkSecurity firm
Sigma Prime16 projects reviewed · 37 reports · latest Aug 2026
See Sigma Prime’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us