Sei Chain and CosmWasm audit
Oak Security reviewed Sei (Sei Chain and CosmWasm audit) on 19 May 2023: 29 findings, 1 critical; 28 marked fixed, 1 acknowledged.
Report hosted on GitHub.
Statuses are the security firm’s own, from this report. Trustblock does not review code.
Findings29
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 5 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 1 | 22 |
CriticalUnbounded loops in the nitro package can lead to a DoSFixed
The report gives no description here.
HighContract claiming is not possible due to a logic errorFixed
The report gives no description here.
HighMsgContractDepositRent should set a minimum amount to avoid potential spammingFixed
The report gives no description here.
HighNot registered message types prevent users from sending transactionsFixed
The report gives no description here.
HighProcessing of MsgPlaceOrders and MsgSend messages in EndBlocker may be exploited to halt the chain if mispricedFixed
The report gives no description here.
HighTick sizes are wrongly updated when a newly registered pair already existsFixed
The report gives no description here.
LowAmino codec must be registered to support end users with hardware devices like LedgerFixed
The report gives no description here.
LowChangeAdmin does not validate that the new admin is different to the current one, which may cause errors in contracts and applications relying on this logicFixed
The report gives no description here.
LowEvents are not emitted consistently across the application, which may impact the ability of third-party applications to be integratedFixed
The report gives no description here.
LowFund transfer in EndBlocker goes against best practicesFixed
The report gives no description here.
Show 10 more
LowGetContract error type used in an incorrect way in HandleDepositOrRefundFixed
The report gives no description here.
LowInefficient implementation of CancelOrdersFixed
The report gives no description here.
LowInefficient implementation of PlaceOrdersFixed
The report gives no description here.
LowInefficient implementation of UpdateQuantityTickSize and UpdatePriceTickSizeFixed
The report gives no description here.
LowInflation rate is set to 0%, while the documentation indicates an intended default inflation rate of 13%Fixed
The report gives no description here.
LowInsufficient validation of addressesFixed
The report gives no description here.
LowMiscellaneous commentsFixed
The report gives no description here.
LowMisleading short description in ContractDepositRent commandFixed
The report gives no description here.
LowMissing usage description for transaction and query CLI commandsFixed
The report gives no description here.
LowPast minting emissions would never happen if the chain is down on the required release dateFixed
The report gives no description here.
Show 8 more
LowPrefer map[T]struct{}{} over map[T]bool for performance reasonsFixed
The report gives no description here.
LowRedundant checks are inefficientFixed
The report gives no description here.
LowResolve TODOs before releaseFixed
The report gives no description here.
LowStrict parsing of boolean CLI arguments may degrade user experienceFixed
The report gives no description here.
LowUnchecked error in SubmitFraudChallenge function might lead to inefficienciesFixed
The report gives no description here.
LowUninformative error messageFixed
The report gives no description here.
LowUnnecessary use of signed integers is inconsistent and may be prone to programming errors in the futureFixed
The report gives no description here.
LowUnregisterContract should remove associated pairs after the contract is removed to avoid consuming unnecessary disk space on validatorsFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Sei’s security record
SeiSecurity firm
Oak Security33 projects reviewed · 60 reports · latest May 2026
See Oak Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us