AtomOne security record
As of 14 Oct 2026, AtomOne has 1 audit report on Trustblock, by Oak Security, dated 23 Apr 2026. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Statuses are the security firms’ own. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| AtomOne audit | Security firm: Oak Security | Date: | Scope: Not recorded. See the report | 1 critical finding, fixed | Open · GitHub |
Findings50
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 1 | 7 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 9 | 32 |
CriticalDuplicate header resubmission falsely triggers misbehavior detection and freezes the Gno light clientAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportHighEqual-height equivocation detection is completely disabled due to using the parent block ID instead of the commit block IDAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportHighGenesis import doubles active governor validator sharesAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportHighInverted error check in staking hooks disables governor auto-deactivationAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportHighMinimum stake requirement for governance voting is bypassed via cosmos.gov.v1 message typesAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportHighNested authz MsgExec bypasses GovVoteDecorator minimum stake checkAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportHighProto3 CommitSig encoding cannot represent absent Gno.land precommits, preventing conversion of blocksAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportHighVerifyLightCommit incorrectly validates signatures by index, breaking non-adjacent header verificationAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowAsymmetric group sizes bias the Nakamoto coefficient adjustment toward decreasingAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowBankers rounding in Nakamoto bonus division can cause over-distribution and halt the chainAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowcheckMisbehaviourHeader uses hardcoded default trust level instead of per-client TrustLevelAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowDelegateGovernor does not validate that the target governor existsAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowDeleteProposal does not remove QuorumCheckQueue entry, causing early termination of quorum checksAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowEditGovernor overwrites the full description instead of merging fieldsAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowEndBlocker ordering contradicts documentationAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowGenesis import panics for non-governor governance delegationsAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowGetNewMinDeposit can return an unsorted sdk.CoinsAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowGovernor existence checks mask storage and encoding errorsAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowIncorrect module name referenced in error commentAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowInitGenesis does not validate minimum self-delegation for imported governorsAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowMinLearningRate nil check uses the wrong field in parameter validationAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowMisleading --from [granter] placeholder in prune-grants CLI commandAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowMissing AppVersion field in header conversion will break client updates if Gno.land populates itAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowMissing else-if in UpdateGovernorStatus causes a redundant undelegate and redelegate cycleAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowMissing MsgAnnotateProposal annotation length validationAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowMissing Use field for GovernanceDelegation query CLI commandAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowMissing validation of TargetActiveProposals allows permanent deposit ratchetAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowMsgEditGovernor.ValidateBasic missing description length validationAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowMsgUpdateParams does not validate params, allowing chain-halting parameter configurationAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowNo validation that the steering DAO and oversight DAO addresses are differentAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowPanic recovery in UpdateBaseGasPrice can leave an inconsistent stateAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowParticipation EMA values not validated in genesisAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowSpelling and grammar issues across the codebaseAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowUnchecked error from GetValidator can cause a nil pointer panicAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowUnhandled collection walk errors are silently discardedAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowV4 upgrade handler sources the MinDepositRatio and GovernorStatusChangePeriod governance parameter defaults from the Cosmos SDK fork instead of the AtomOne definitionsAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowV4-to-v5 migration does not clear deprecated parameters, breaking genesis exportAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowValidateTrustLevel function is dead codeAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowVerifyLightCommit error message reports incorrect voting power thresholdAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportLowWrong variable in the error message for the MaximumCoefficient validationAtomOne audit · Oak Security · 23 Apr 2026Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="atomone"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us