Anoma security record
As of 21 Oct 2026, Anoma has 2 audit reports by 2 security firms on Trustblock; the latest is by Nethermind Security, dated 13 Nov 2025. Those reports list 1 critical acknowledged and not fixed.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits2
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Anoma security review | Security firm: Nethermind Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Namada Ethereum Bridge audit | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | 1 critical acknowledged, not fixed | Open · GitHub |
Findings15
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 1 | 1 |
| High | 0 | 1 | 4 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 1 | 7 |
Marked Info, Best Practices or Informational by the firms. Not counted as findings.
InfoDifferences between the specification and implementationAnoma security review · Nethermind Security · 13 Nov 2025Acknowledged
The report gives no description here.
Open the reportInfoPrivacy Leakage through imageID usageAnoma security review · Nethermind Security · 13 Nov 2025Acknowledged
The report gives no description here.
Open the reportInformationalInclude a check to ensure that a transfer is sent only if the slashed_amount is greater than 0Namada Ethereum Bridge audit · Oak Security · 28 Mar 2023Acknowledged
The report gives no description here.
Open the reportInformationalInstance of potential integer overflow on arithmetic operationsNamada Ethereum Bridge audit · Oak Security · 28 Mar 2023Acknowledged
The report gives no description here.
Open the reportBest PracticesRemove debug trait for secret keyAnoma security review · Nethermind Security · 13 Nov 2025Fixed
The report gives no description here.
Open the reportBest PracticesShould constrain logic instances’ length to match the number of keys in the batch circuitAnoma security review · Nethermind Security · 13 Nov 2025Fixed
The report gives no description here.
Open the reportInfoThe function verifyMerkleProof() does not distinguish between the leaves and nodesAnoma security review · Nethermind Security · 13 Nov 2025Fixed
The report gives no description here.
Open the reportInformationalLess than half of the available wrapped transactions from the mempool are potentially included in a proposalNamada Ethereum Bridge audit · Oak Security · 28 Mar 2023Fixed
The report gives no description here.
Open the reportInformationalTypographical errorNamada Ethereum Bridge audit · Oak Security · 28 Mar 2023Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="anoma"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us