Dymension Point 1D Stream 3_ Dymint audit

Oak Security9 Jul 2024Code version: not recorded (see the report)

Audit · firm’s term: security audit

Oak Security reviewed Dymension (Dymension Point 1D Stream 3_ Dymint audit) on 9 Jul 2024: 16 findings, 1 critical; 13 marked fixed, 3 acknowledged.

1 critical finding, fixed

Open the report Open Dymension’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings16

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	1
High	0	0	7
Medium	0	0	0
Low	0	3	5

CriticalPeer nodes could receive blocks that are not applied by the sequencerFixed

The report gives no description here.

HighApplying blocks concurrently can lead to unexpected errorsFixed

The report gives no description here.

HighCONTINUATION frames flood vulnerability in x/net allows attackers to DoS the nodeFixed

The report gives no description here.

HighHTTP server misconfiguration allows Slowloris DoS attacksFixed

The report gives no description here.

HighIncorrect mempool initialization height leads to discarded transactionsFixed

The report gives no description here.

HighInvalid blocks can be received via p2p gossipFixed

The report gives no description here.

HighNon-atomic batch submission to data availability and settlement layers causes repayment for the same data and potential indefinite failureFixed

The report gives no description here.

HighSubmitting blocks to the data availability and settlement layer can result in a deadlockFixed

The report gives no description here.

LowIncomplete validation of configuration parametersFixed

The report gives no description here.

LowMempool is initialized at genesis without the preCheck and postCheck functions, leading to not validating the transaction’s size and wanted gas until the first block is committedFixed

The report gives no description here.

Show 3 more

LowNode can be started without providing the genesisFixed

The report gives no description here.

LowStopped block production is immediately resumed after receiving a health status event from the data availability or settlement layerFixed

The report gives no description here.

LowValidating gossiped transactions may block the libp2p validator queueFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Dymension’s security record

Dymension

Audits4 audits by 1 firmLast audit Aug 2024, by Oak Security.

Critical findingsNo open critical findingsAcross the 4 reports, 5 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Dymension’s security record

Security firm

Oak Security

33 projects reviewed · 60 reports · latest May 2026

See Oak Security’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.