Dymension security record
As of 21 Oct 2026, Dymension has 4 audit reports by 1 security firm on Trustblock; the latest is by Oak Security, dated 13 Aug 2024. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits3
Newest first
1 other security report listed, not counted
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Dymension Point 1D Stream 6_ RollApp White-box Pen | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Dymension Point 1D Stream 3_ Dymint audit | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
| Dymension Point 1D Stream 2_ Virtual Frontier Cont | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Dymension Point 0D audit | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | 4 critical findings, fixed | Open · GitHub |
Findings36
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 5 |
| High | 0 | 0 | 8 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 9 | 14 |
CriticalPeer nodes could receive blocks that are not applied by the sequencerDymension Point 1D Stream 3_ Dymint audit · Oak Security · 9 Jul 2024Fixed
The report gives no description here.
Open the reportCriticalDirectly sending funds to the txfees module can result in a denial-of-serviceDymension Point 0D audit · Oak Security · 8 Mar 2024Fixed
The report gives no description here.
Open the reportCriticalMsgEthereumTx EVM messages can be nested within a MsgExec message to bypass Ante handlers and steal transaction fees or perform a Denial-of-Service attackDymension Point 0D audit · Oak Security · 8 Mar 2024Fixed
The report gives no description here.
Open the reportCriticalThe invariant checking the last stream ID will break over time, potentially causing the chain to haltDymension Point 0D audit · Oak Security · 8 Mar 2024Fixed
The report gives no description here.
Open the reportCriticalUnbounded loop in PowApprox can be exploited to halt the chainDymension Point 0D audit · Oak Security · 8 Mar 2024Fixed
The report gives no description here.
Open the reportHighApplying blocks concurrently can lead to unexpected errorsDymension Point 1D Stream 3_ Dymint audit · Oak Security · 9 Jul 2024Fixed
The report gives no description here.
Open the reportHighCONTINUATION frames flood vulnerability in x/net allows attackers to DoS the nodeDymension Point 1D Stream 3_ Dymint audit · Oak Security · 9 Jul 2024Fixed
The report gives no description here.
Open the reportHighHTTP server misconfiguration allows Slowloris DoS attacksDymension Point 1D Stream 3_ Dymint audit · Oak Security · 9 Jul 2024Fixed
The report gives no description here.
Open the reportHighIncorrect mempool initialization height leads to discarded transactionsDymension Point 1D Stream 3_ Dymint audit · Oak Security · 9 Jul 2024Fixed
The report gives no description here.
Open the reportHighInvalid blocks can be received via p2p gossipDymension Point 1D Stream 3_ Dymint audit · Oak Security · 9 Jul 2024Fixed
The report gives no description here.
Open the reportShow 10 more
HighNon-atomic batch submission to data availability and settlement layers causes repayment for the same data and potential indefinite failureDymension Point 1D Stream 3_ Dymint audit · Oak Security · 9 Jul 2024Fixed
The report gives no description here.
Open the reportHighSubmitting blocks to the data availability and settlement layer can result in a deadlockDymension Point 1D Stream 3_ Dymint audit · Oak Security · 9 Jul 2024Fixed
The report gives no description here.
Open the reportHighEVM contract addresses squatting via the vesting module resulting in non-functioning contracts and inaccessible fundsDymension Point 0D audit · Oak Security · 8 Mar 2024Fixed
The report gives no description here.
Open the reportLowIncomplete validation of configuration parametersDymension Point 1D Stream 3_ Dymint audit · Oak Security · 9 Jul 2024Fixed
The report gives no description here.
Open the reportLowMempool is initialized at genesis without the preCheck and postCheck functions, leading to not validating the transaction’s size and wanted gas until the first block is committedDymension Point 1D Stream 3_ Dymint audit · Oak Security · 9 Jul 2024Fixed
The report gives no description here.
Open the reportLowNode can be started without providing the genesisDymension Point 1D Stream 3_ Dymint audit · Oak Security · 9 Jul 2024Fixed
The report gives no description here.
Open the reportLowStopped block production is immediately resumed after receiving a health status event from the data availability or settlement layerDymension Point 1D Stream 3_ Dymint audit · Oak Security · 9 Jul 2024Fixed
The report gives no description here.
Open the reportLowValidating gossiped transactions may block the libp2p validator queueDymension Point 1D Stream 3_ Dymint audit · Oak Security · 9 Jul 2024Fixed
The report gives no description here.
Open the reportLowA stream is incorrectly considered active after it has finishedDymension Point 0D audit · Oak Security · 8 Mar 2024Fixed
The report gives no description here.
Open the reportLowCLI commands for updating and replacing stream distributions are not registeredDymension Point 0D audit · Oak Security · 8 Mar 2024Fixed
The report gives no description here.
Open the reportShow 7 more
LowCreateStream does not prevent startTime in the pastDymension Point 0D audit · Oak Security · 8 Mar 2024Fixed
The report gives no description here.
Open the reportLowErrors during fee swaps may result in an erroneous stateDymension Point 0D audit · Oak Security · 8 Mar 2024Fixed
The report gives no description here.
Open the reportLowErrors during stream distribution prevent the processing of other streamsDymension Point 0D audit · Oak Security · 8 Mar 2024Fixed
The report gives no description here.
Open the reportLowInadequate validation of weights in DistrInfo creationDymension Point 0D audit · Oak Security · 8 Mar 2024Fixed
The report gives no description here.
Open the reportLowMissing message registration for Amino codecDymension Point 0D audit · Oak Security · 8 Mar 2024Fixed
The report gives no description here.
Open the reportLowNon-sequential stream creation during InitGenesis will cause invariant failureDymension Point 0D audit · Oak Security · 8 Mar 2024Fixed
The report gives no description here.
Open the reportLowRewards can be added to a finished gauge resulting in inaccessible fundsDymension Point 0D audit · Oak Security · 8 Mar 2024Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="dymension"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us