Syndicate Stage 1A audit

Oak Security9 Sep 2025Code version: not recorded (see the report)

Audit · firm’s term: security audit

Oak Security reviewed Syndicate (Syndicate Stage 1A audit) on 9 Sep 2025: 19 findings, 1 critical; 11 marked fixed, 8 acknowledged.

1 critical finding, fixed

Open the report Open Syndicate’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings19

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	1
High	0	3	4
Medium	0	0	0
Low	0	5	6

HighIncorrect log count logic causes maxQty validation to be ineffectiveAcknowledged

The report gives no description here.

HighMissing bounds checks on block index may cause panicAcknowledged

The report gives no description here.

HighUnequal block and receipt lengths may cause panic or skipped validation in validate_receiptsAcknowledged

The report gives no description here.

LowDisabled network policies allow unrestricted inter-namespace trafficAcknowledged

The report gives no description here.

LowGitHub PAT propagated cluster-wide via ClusterExternalSecretAcknowledged

The report gives no description here.

LowMax quantity parameter is not enforced during log retrievalAcknowledged

The report gives no description here.

LowRedis authentication disabled in testnet environmentAcknowledged

The report gives no description here.

LowUnencrypted WebSocket connections used for sequencingAcknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Syndicate’s security record

Syndicate

Audits2 audits by 1 firmLast audit Sep 2025, by Oak Security.

Critical findingsNo open critical findingsAcross the 2 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Syndicate’s security record

Security firm

Oak Security

33 projects reviewed · 60 reports · latest May 2026

See Oak Security’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.