– ZIGChain audit

Oak Security15 May 2026Code version: not recorded (see the report)

Oak Security reviewed ZIGChain (– ZIGChain audit) on 15 May 2026: 30 findings, 1 critical; 21 marked fixed, 9 acknowledged.

1 critical finding, fixed

Open the report Open ZIGChain’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings30

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	1
High	0	1	7
Medium	0	0	0
Low	0	8	13

Marked Informational by the firm. Not counted as findings.

InformationalAll IBC settings fields lack per-packet caching causing misbehavior during in-flight packetsAcknowledged

The report gives no description here.

InformationalFactory token burn authorization is asymmetric with minting authorizationAcknowledged

The report gives no description here.

InformationalGlobal max slippage parameter restricts LP flexibility for volatile pairsAcknowledged

The report gives no description here.

InformationalLexicographic pool ordering in query resultsAcknowledged

The report gives no description here.

InformationalStargate query amplification via unbounded response marshallingAcknowledged

The report gives no description here.

InformationalChannel ordering mismatch between TokenWrapper IBC module tests and ICS-20 specificationFixed

The report gives no description here.

InformationalChannel validation on OnTimeoutPacket incorrectly requires OPEN stateFixed

The report gives no description here.

InformationalDuplicated IsDexPoolAddress logic creates maintenance riskFixed

The report gives no description here.

InformationalExcessive maximum custom message size for WASM bindingsFixed

The report gives no description here.

InformationalIBC and transfer queries not whitelisted for WASM stargate queriesFixed

The report gives no description here.

Show 5 more

InformationalIncorrect variable reference in the AddLiquidity error messageFixed

The report gives no description here.

InformationalMissing input validation in CosmWasm query pluginFixed

The report gives no description here.

InformationalMissing post-swap reserve validation in SwapExactOutFixed

The report gives no description here.

InformationalSwapOut query type defined but not wired in custom querierFixed

The report gives no description here.

InformationalValidateBasic allows zero-amount coins that fail deeper in executionFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of ZIGChain’s security record

ZIGChain

Audits5 audits by 1 firmLast audit May 2026, by Oak Security.

Critical findingsNo open critical findingsAcross the 5 reports, 7 critical findings were reported. Each is marked fixed by the firm that reported it.

Open ZIGChain’s security record

Security firm

Oak Security

33 projects reviewed · 60 reports · latest May 2026

See Oak Security’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.