OmiseGo MoreVP
Consensys reviewed OMG Network (OmiseGo MoreVP) on 1 Jan 2020: 20 findings, 1 critical; 11 marked fixed, 9 open.
Report hosted on diligence.security.
Trustblock does not review code.
Findings20
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 2 |
| Medium | 1 | 0 | 2 |
| Low | 8 | 0 | 6 |
CriticalMerkle.checkMembership allows existence proofs for the same leaf in multiple locations in the treeFixed
The report gives no description here.
HighImproper initialization of spending condition abstraction allows “v2 transactions” to exit using PaymentExitGameFixed
The report gives no description here.
HighRLPReader - Leading zeroes allow multiple valid encodings and exit / output ids for the same transactionFixed
The report gives no description here.
MediumMaintainer can bypass exit game quarantine by registering not-yet-deployed contractsFixed
The report gives no description here.
MediumMerkle - The implementation does not enforce inclusion of leaf nodes.Fixed
The report gives no description here.
LowBlockController - maintainer should be the only entity to set new authorityFixed
The report gives no description here.
LowECDSA error value is not handledFixed
The report gives no description here.
LowEthVault - Unused state variableFixed
The report gives no description here.
LowNo existence checks on framework block and timestamp readsFixed
The report gives no description here.
LowRecommendation: remove IsDeposit and add a similar getter to BlockControllerFixed
The report gives no description here.
Show 1 more
LowRecommendation: Remove optional arguments and clean unused codeFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of OMG Network’s security record
Security firm
Consensys41 projects reviewed · 59 reports · latest Oct 2024
See Consensys’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us