Anoma security record
As of 21 Oct 2026, Anoma has 2 audit reports by 2 security firms on Trustblock; the latest is by Nethermind Security, dated 13 Nov 2025. Those reports list 1 critical acknowledged and not fixed.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits2
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Anoma security review | Security firm: Nethermind Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Namada Ethereum Bridge audit | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | 1 critical acknowledged, not fixed | Open · GitHub |
Findings15
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 1 | 1 |
| High | 0 | 1 | 4 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 1 | 7 |
CriticalEthereum events are not correctly confirmedNamada Ethereum Bridge audit · Oak Security · 28 Mar 2023Fixed
The report gives no description here.
Open the reportHighBridging tokens from Ethereum to Namada with an invalid amount of receiver addresses will freeze escrowed fundsNamada Ethereum Bridge audit · Oak Security · 28 Mar 2023Fixed
The report gives no description here.
Open the reportHighIncorrect accounting of voting power for Ethereum eventsNamada Ethereum Bridge audit · Oak Security · 28 Mar 2023Fixed
The report gives no description here.
Open the reportHighOracle uses an unbounded queue which might lead to out-of-memory issuesNamada Ethereum Bridge audit · Oak Security · 28 Mar 2023Fixed
The report gives no description here.
Open the reportHighThe minimum number of block confirmations required to bridge ERC20 tokens from Ethereum to Namada is not enforcedNamada Ethereum Bridge audit · Oak Security · 28 Mar 2023Fixed
The report gives no description here.
Open the reportLowCheck a point is on the curveAnoma security review · Nethermind Security · 13 Nov 2025Fixed
The report gives no description here.
Open the reportLowECDSA signature creation and verificationAnoma security review · Nethermind Security · 13 Nov 2025Fixed
The report gives no description here.
Open the reportLowUpdate rand_seed to stronger randomness guaranteesAnoma security review · Nethermind Security · 13 Nov 2025Fixed
The report gives no description here.
Open the reportLowThe minimum number of block confirmations required to bridge ERC20 tokens from Ethereum to Namada is not enforcedNamada Ethereum Bridge audit · Oak Security · 28 Mar 2023Fixed
The report gives no description here.
Open the reportLowThe total size in bytes of the transactions in a block proposal can exceed the block byte size limitNamada Ethereum Bridge audit · Oak Security · 28 Mar 2023Fixed
The report gives no description here.
Open the reportShow 2 more
LowUnsafe use of selfdestructNamada Ethereum Bridge audit · Oak Security · 28 Mar 2023Fixed
The report gives no description here.
Open the reportLowValidator set update protocol transactions are not validated in the process proposal phaseNamada Ethereum Bridge audit · Oak Security · 28 Mar 2023Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="anoma"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us