Shido

ZokyoCode version: not recorded (see the report)

Audit · firm’s term: security audit

Zokyo reviewed Shido on 30 Jul 2024: 30 findings, 0 critical; all acknowledged, none fixed.

No open critical findings
Open the reportOpen Shido’s security record
Report stored on IPFS. Content hash QmbsgHRVLifBydUyXCrVdaCAQ1Xe8MqHjV2gwZ8Myy9rJa

Trustblock does not review code.

Findings30

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium030
Low0270
MediumDoS in CometBFT Block Sync (github.com/cometbft/ cometbft/blocksync)Acknowledged

The report gives no description here.

MediumIncorrect Access Control via Malicious CosmWasm ContractAcknowledged

The report gives no description here.

MediumUncontrolled Resource Consumption in go-jose (github.com/dvsekhvalnov/jose2go)Acknowledged

The report gives no description here.

LowGoBoolExpressionsAcknowledged

The report gives no description here.

LowGoBuildTag (rpc/namespaces/ethereum/debug/trace.go: 18)Acknowledged

The report gives no description here.

LowGoCommentStartAcknowledged

The report gives no description here.

LowGoDeprecationAcknowledged

The report gives no description here.

LowGoDfaConstantConditionAcknowledged

The report gives no description here.

LowGoDfaErrorMayBeNotNilAcknowledged

The report gives no description here.

LowGoDfaNilDereferenceAcknowledged

The report gives no description here.

Show 10 more
LowGoDirectComparisonOfErrors (rpc/websockets.go, server/ json_rpc.go, wallets/usbwallet/ledger.go)Acknowledged

The report gives no description here.

LowGoErrorStringFormat (wallets/usbwallet/ledger.go: 140)Acknowledged

The report gives no description here.

LowGoExportedFuncWithUnexportedTypeAcknowledged

The report gives no description here.

LowGoImportUsedAsNameAcknowledged

The report gives no description here.

LowGoMixedReceiverTypesAcknowledged

The report gives no description here.

LowGoNameStartsWithPackageNameAcknowledged

The report gives no description here.

LowGoPreferNilSliceAcknowledged

The report gives no description here.

LowGoRedundantConversionAcknowledged

The report gives no description here.

LowGoUnhandledErrorResultAcknowledged

The report gives no description here.

LowGoUnsortedImport (app/ante/utils/interfaces.go)Acknowledged

The report gives no description here.

Show 10 more
LowGoUnusedConstAcknowledged

The report gives no description here.

LowGoUnusedExportedFunctionAcknowledged

The report gives no description here.

LowGoUnusedExportedTypeAcknowledged

The report gives no description here.

LowGoUnusedFunctionAcknowledged

The report gives no description here.

LowGoUnusedGlobalVariableAcknowledged

The report gives no description here.

LowGoVarAndConstTypeMayBeOmittedAcknowledged

The report gives no description here.

LowGoVetCopyLockAcknowledged

The report gives no description here.

LowGoVetLostCancelAcknowledged

The report gives no description here.

LowJsonSchemaCompliance (client/docs/config.json)Acknowledged

The report gives no description here.

LowPackageJsonMismatchedDependency (contracts/package.json: 10)Acknowledged

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Shido’s security record

Shido
Audits2 audits by 1 firmLast audit Jul 2024, by Zokyo.
Critical findingsNo open critical findingsAcross the 2 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
IncidentIncident 28 Feb 2024Source: De.Fi incident database.
Open Shido’s security record

Security firm

Zokyo

89 projects reviewed · 131 reports · latest Feb 2025

See Zokyo’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us