Injective audit

Oak Security20 Jan 2023Code version: not recorded (see the report)

Oak Security reviewed Injective (Injective audit) on 20 Jan 2023: 8 findings, 1 critical; 7 marked fixed, 1 acknowledged.

1 critical finding, fixed

Open the report Open Injective’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings8

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	1
High	0	1	2
Medium	0	0	0
Low	0	0	4

CriticalContract creators can update the gas price into invalid integer value in order to disable the wasmx’s BeginBlocker executionFixed

The report gives no description here.

HighGovernance is not able to effectively remove a contract from registryFixed

The report gives no description here.

HighValid positions may be rejected prior the application of PnLFixed

The report gives no description here.

LowConsider validating max contract gas limit is higher than the minimum execution gas limitFixed

The report gives no description here.

LowCustom calls between Cosmos SDK modules and CosmWasm contracts requires third party developers to implement their own authorization logicFixed

The report gives no description here.

LowInteger gas price type allows negative valuesFixed

The report gives no description here.

LowToo many contracts registered would cause GetContracts and GetActiveContracts query messages to failFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Injective’s security record

Injective

Audits3 audits by 2 firmsLast audit Aug 2024, by HashEx.

Critical findingsNo open critical findingsAcross the 3 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Injective’s security record

Security firm

Oak Security

33 projects reviewed · 60 reports · latest May 2026

See Oak Security’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.