Astroport security record
As of 21 Oct 2026, Astroport has 12 audit reports by 1 security firm on Trustblock; the latest is by Oak Security, dated 17 Mar 2025. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits12
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Astroport PCL Neutron Duality Orderbook Integratio | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | 3 critical findings, fixed | Open · GitHub |
| Astroport Fee Sharing audit | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Astroport vxASTRO Updates audit | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Astroport Tokenfactory LP Tokens audit | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Astroport Hub Neutron Migration audit | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | 2 critical findings, fixed | Open · GitHub |
| Astroport on Osmosis audit | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | 2 critical findings, fixed | Open · GitHub |
| Astroport Concentrated Liquidity Pool with Injecti | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Astroport LP Token Balance Tracking audit | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Astroport Concentrated Liquidity Pool audit | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Astroport IBC audit | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Astroport Builder Unlock Contract audit | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Astroport Governance audit | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
Findings58
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 8 |
| High | 0 | 1 | 10 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 5 | 34 |
CriticalInconsistent parameter ordering in price conversion functionAstroport PCL Neutron Duality Orderbook Integratio · Oak Security · 17 Mar 2025Fixed
The report gives no description here.
Open the reportCriticalMissing ob_state persistence causes incorrect pool repegAstroport PCL Neutron Duality Orderbook Integratio · Oak Security · 17 Mar 2025Fixed
The report gives no description here.
Open the reportCriticalUpdated price state is not persisted after cumulative trade processingAstroport PCL Neutron Duality Orderbook Integratio · Oak Security · 17 Mar 2025Fixed
The report gives no description here.
Open the reportCriticalAttackers can bypass self-migration validation to control assembly contractAstroport Hub Neutron Migration audit · Oak Security · 22 May 2024Fixed
The report gives no description here.
Open the reportCriticalAttackers can manipulate the proposal outcome by transferring voting powersAstroport Hub Neutron Migration audit · Oak Security · 22 May 2024Fixed
The report gives no description here.
Open the reportCriticalAttackers can swap any token and drain funds from poolsAstroport on Osmosis audit · Oak Security · 29 Jan 2024Fixed
The report gives no description here.
Open the reportCriticalDouble refunds on excess offer assets allow draining poolsAstroport on Osmosis audit · Oak Security · 29 Jan 2024Fixed
The report gives no description here.
Open the reportCriticalClaiming allocation will cause proposed receiver’s original allocation to be overwritten, leaving funds inaccessible in the contractAstroport Governance audit · Oak Security · 15 Mar 2022Fixed
The report gives no description here.
Open the reportHighExcessive gas consumption in pool operationsAstroport PCL Neutron Duality Orderbook Integratio · Oak Security · 17 Mar 2025Fixed
The report gives no description here.
Open the reportHighASTRO pools can be voted for emissionsAstroport vxASTRO Updates audit · Oak Security · 20 Aug 2024Fixed
The report gives no description here.
Open the reportShow 10 more
HighInconsistent support for SetBeforeSendHook message in Pair and Pair Concentrated contractsAstroport Tokenfactory LP Tokens audit · Oak Security · 2 Jul 2024Fixed
The report gives no description here.
Open the reportHighIBC transfers can be grieved, preventing old ASTRO tokens from being burnedAstroport Hub Neutron Migration audit · Oak Security · 22 May 2024Fixed
The report gives no description here.
Open the reportHighIncorrect permissioning of IbcExecuteProposal execution leads to failure of proposal execution and elevated owner privilegesAstroport IBC audit · Oak Security · 14 Feb 2023Fixed
The report gives no description here.
Open the reportHighIncreasing the cliff may result in unlocked tokens becoming locked againAstroport Builder Unlock Contract audit · Oak Security · 7 Dec 2022Fixed
The report gives no description here.
Open the reportHighRecipient transfer does not transfer unlocked amount checkpointAstroport Builder Unlock Contract audit · Oak Security · 7 Dec 2022Fixed
The report gives no description here.
Open the reportHighSchedule cliff shifts the unlock start date rather than leads to unlocked tokens that cannot be claimed yetAstroport Builder Unlock Contract audit · Oak Security · 7 Dec 2022Fixed
The report gives no description here.
Open the reportHighLeftover amount after providing liquidity is not refundedAstroport Governance audit · Oak Security · 15 Mar 2022Fixed
The report gives no description here.
Open the reportHighOriginal receivers that transferred allocation will not be able to receive new allocationsAstroport Governance audit · Oak Security · 15 Mar 2022Fixed
The report gives no description here.
Open the reportLowInaccurate simulations due to missing cumulative trade handlingAstroport PCL Neutron Duality Orderbook Integratio · Oak Security · 17 Mar 2025Fixed
The report gives no description here.
Open the reportLowInconsistent range validationAstroport PCL Neutron Duality Orderbook Integratio · Oak Security · 17 Mar 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowIncorrect percentage constants in liquidity definitionsAstroport PCL Neutron Duality Orderbook Integratio · Oak Security · 17 Mar 2025Fixed
The report gives no description here.
Open the reportLowMissing empty pool validation in query_cumulative_pricesAstroport PCL Neutron Duality Orderbook Integratio · Oak Security · 17 Mar 2025Fixed
The report gives no description here.
Open the reportLowMissing validation for avg_price_adjustment parameterAstroport PCL Neutron Duality Orderbook Integratio · Oak Security · 17 Mar 2025Fixed
The report gives no description here.
Open the reportLowThe QueryWhitelist query might run out of gasAstroport vxASTRO Updates audit · Oak Security · 20 Aug 2024Fixed
The report gives no description here.
Open the reportLowIndexer for ProvideLiquidity is hardcoded to zeroAstroport Tokenfactory LP Tokens audit · Oak Security · 2 Jul 2024Fixed
The report gives no description here.
Open the reportLowDifferent output when timestamp is provided as None and Some(env.block.time.seconds())Astroport Hub Neutron Migration audit · Oak Security · 22 May 2024Fixed
The report gives no description here.
Open the reportLowExecuteFromMultisig authorization check can be bypassed if the satellite’s contract migration admin is the satellite contract itselfAstroport Hub Neutron Migration audit · Oak Security · 22 May 2024Fixed
The report gives no description here.
Open the reportLowold_astro_denom and outpost_burn_params validation logic can be improvedAstroport Hub Neutron Migration audit · Oak Security · 22 May 2024Fixed
The report gives no description here.
Open the reportLowQuerying total supply for denom validation is inaccurateAstroport Hub Neutron Migration audit · Oak Security · 22 May 2024Fixed
The report gives no description here.
Open the reportLowTracked denom is not validatedAstroport Hub Neutron Migration audit · Oak Security · 22 May 2024Fixed
The report gives no description here.
Open the reportShow 10 more
LowUpdating xASTRO denom prevents proposals from being endedAstroport Hub Neutron Migration audit · Oak Security · 22 May 2024Fixed
The report gives no description here.
Open the reportLowInternal price is updated regardless of trade sizeAstroport on Osmosis audit · Oak Security · 29 Jan 2024Fixed
The report gives no description here.
Open the reportLowInconsistent admin duplicate validationAstroport Concentrated Liquidity Pool with Injecti · Oak Security · 13 Jul 2023Fixed
The report gives no description here.
Open the reportLowInconsistent contract version between Cargo.toml and migrationAstroport Concentrated Liquidity Pool with Injecti · Oak Security · 13 Jul 2023Fixed
The report gives no description here.
Open the reportLowIncorrect validation of updated administrators may lead to exceeding the MAX_ADMINS limitAstroport Concentrated Liquidity Pool with Injecti · Oak Security · 13 Jul 2023Fixed
The report gives no description here.
Open the reportLowLack of denom validationAstroport Concentrated Liquidity Pool with Injecti · Oak Security · 13 Jul 2023Fixed
The report gives no description here.
Open the reportLowLack of orderbook state validation upon updateAstroport Concentrated Liquidity Pool with Injecti · Oak Security · 13 Jul 2023Fixed
The report gives no description here.
Open the reportLowMarket tick size parameters cannot be updatedAstroport Concentrated Liquidity Pool with Injecti · Oak Security · 13 Jul 2023Fixed
The report gives no description here.
Open the reportLowVariable names and comments differ from the implementationAstroport Concentrated Liquidity Pool with Injecti · Oak Security · 13 Jul 2023Fixed
The report gives no description here.
Open the reportLowFactory contract’s ownership transfer freezes pair contractsAstroport Concentrated Liquidity Pool audit · Oak Security · 16 Mar 2023Fixed
The report gives no description here.
Open the reportShow 10 more
LowThe moving average time limit can be incorrectly set to zeroAstroport Concentrated Liquidity Pool audit · Oak Security · 16 Mar 2023Fixed
The report gives no description here.
Open the reportLowassembly contract owner can overwrite proposalsAstroport IBC audit · Oak Security · 14 Feb 2023Fixed
The report gives no description here.
Open the reportLowInconsistent expected format for main controller portAstroport IBC audit · Oak Security · 14 Feb 2023Fixed
The report gives no description here.
Open the reportLowNo validation of IBC message timeoutAstroport IBC audit · Oak Security · 14 Feb 2023Fixed
The report gives no description here.
Open the reportLowRESULTS storage does not save empty-message proposalsAstroport IBC audit · Oak Security · 14 Feb 2023Fixed
The report gives no description here.
Open the reportLowInconsistency in validation during recipient transfer may lead to a loss of fundsAstroport Builder Unlock Contract audit · Oak Security · 7 Dec 2022Fixed
The report gives no description here.
Open the reportLowLack of validation when creating an allocationAstroport Builder Unlock Contract audit · Oak Security · 7 Dec 2022Fixed
The report gives no description here.
Open the reportLowMaximum allocation amount can be set lower than total depositsAstroport Builder Unlock Contract audit · Oak Security · 7 Dec 2022Fixed
The report gives no description here.
Open the reportLowTransfer of unallocated tokens leads to wrong token accountingAstroport Builder Unlock Contract audit · Oak Security · 7 Dec 2022Fixed
The report gives no description here.
Open the reportLowExtra funds sent to AstroZap contract are lostAstroport Governance audit · Oak Security · 15 Mar 2022Fixed
The report gives no description here.
Open the reportShow 2 more
LowMisconfigured schedule duration could cause division by zero error, leaving funds inaccessibleAstroport Governance audit · Oak Security · 15 Mar 2022Fixed
The report gives no description here.
Open the reportLowUnlockedTokens query message does not include cliff period during calculationAstroport Governance audit · Oak Security · 15 Mar 2022Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="astroport"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us