ZIGChain security record
As of 21 Oct 2026, ZIGChain has 5 audit reports by 1 security firm on Trustblock; the latest is by Oak Security, dated 15 May 2026. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits5
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| – ZIGChain audit | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
| ZIGChain audit | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
| ZIGChain Update audit | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | 1 critical finding, fixed | Open · GitHub |
| ZIGChain Reward Contract audit | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | 2 critical findings, fixed | Open · GitHub |
| ZIGChain audit | Security firm: Oak Security | Date: | Scope: Not recorded (see the report) | 2 critical findings, fixed | Open · GitHub |
Findings101
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 7 |
| High | 0 | 2 | 24 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 21 | 47 |
Marked Informational by the firms. Not counted as findings.
InformationalAll IBC settings fields lack per-packet caching causing misbehavior during in-flight packets– ZIGChain audit · Oak Security · 15 May 2026Acknowledged
The report gives no description here.
Open the reportInformationalFactory token burn authorization is asymmetric with minting authorization– ZIGChain audit · Oak Security · 15 May 2026Acknowledged
The report gives no description here.
Open the reportInformationalGlobal max slippage parameter restricts LP flexibility for volatile pairs– ZIGChain audit · Oak Security · 15 May 2026Acknowledged
The report gives no description here.
Open the reportInformationalLexicographic pool ordering in query results– ZIGChain audit · Oak Security · 15 May 2026Acknowledged
The report gives no description here.
Open the reportInformationalStargate query amplification via unbounded response marshalling– ZIGChain audit · Oak Security · 15 May 2026Acknowledged
The report gives no description here.
Open the reportInformationalAll IBC settings fields lack per-packet caching causing misbehavior during in-flight packetsZIGChain audit · Oak Security · 5 May 2026Acknowledged
The report gives no description here.
Open the reportInformationalFactory token burn authorization is asymmetric with minting authorizationZIGChain audit · Oak Security · 5 May 2026Acknowledged
The report gives no description here.
Open the reportInformationalGlobal max slippage parameter restricts LP flexibility for volatile pairsZIGChain audit · Oak Security · 5 May 2026Acknowledged
The report gives no description here.
Open the reportInformationalLexicographic pool ordering in query resultsZIGChain audit · Oak Security · 5 May 2026Acknowledged
The report gives no description here.
Open the reportInformationalStargate query amplification via unbounded response marshallingZIGChain audit · Oak Security · 5 May 2026Acknowledged
The report gives no description here.
Open the reportShow 10 more
InformationalOperator address change during recovery inflates TotalTransferredInZIGChain Update audit · Oak Security · 19 Dec 2025Acknowledged
The report gives no description here.
Open the reportInformationalChannel ordering mismatch between TokenWrapper IBC module tests and ICS-20 specification– ZIGChain audit · Oak Security · 15 May 2026Fixed
The report gives no description here.
Open the reportInformationalChannel validation on OnTimeoutPacket incorrectly requires OPEN state– ZIGChain audit · Oak Security · 15 May 2026Fixed
The report gives no description here.
Open the reportInformationalDuplicated IsDexPoolAddress logic creates maintenance risk– ZIGChain audit · Oak Security · 15 May 2026Fixed
The report gives no description here.
Open the reportInformationalExcessive maximum custom message size for WASM bindings– ZIGChain audit · Oak Security · 15 May 2026Fixed
The report gives no description here.
Open the reportInformationalIBC and transfer queries not whitelisted for WASM stargate queries– ZIGChain audit · Oak Security · 15 May 2026Fixed
The report gives no description here.
Open the reportInformationalIncorrect variable reference in the AddLiquidity error message– ZIGChain audit · Oak Security · 15 May 2026Fixed
The report gives no description here.
Open the reportInformationalMissing input validation in CosmWasm query plugin– ZIGChain audit · Oak Security · 15 May 2026Fixed
The report gives no description here.
Open the reportInformationalMissing post-swap reserve validation in SwapExactOut– ZIGChain audit · Oak Security · 15 May 2026Fixed
The report gives no description here.
Open the reportInformationalSwapOut query type defined but not wired in custom querier– ZIGChain audit · Oak Security · 15 May 2026Fixed
The report gives no description here.
Open the reportShow 10 more
InformationalValidateBasic allows zero-amount coins that fail deeper in execution– ZIGChain audit · Oak Security · 15 May 2026Fixed
The report gives no description here.
Open the reportInformationalChannel ordering mismatch between TokenWrapper IBC module tests and ICS-20 specificationZIGChain audit · Oak Security · 5 May 2026Fixed
The report gives no description here.
Open the reportInformationalChannel validation on OnTimeoutPacket incorrectly requires OPEN stateZIGChain audit · Oak Security · 5 May 2026Fixed
The report gives no description here.
Open the reportInformationalDuplicated IsDexPoolAddress logic creates maintenance riskZIGChain audit · Oak Security · 5 May 2026Fixed
The report gives no description here.
Open the reportInformationalExcessive maximum custom message size for WASM bindingsZIGChain audit · Oak Security · 5 May 2026Fixed
The report gives no description here.
Open the reportInformationalIBC and transfer queries not whitelisted for WASM stargate queriesZIGChain audit · Oak Security · 5 May 2026Fixed
The report gives no description here.
Open the reportInformationalIncorrect variable reference in the AddLiquidity error messageZIGChain audit · Oak Security · 5 May 2026Fixed
The report gives no description here.
Open the reportInformationalMissing input validation in CosmWasm query pluginZIGChain audit · Oak Security · 5 May 2026Fixed
The report gives no description here.
Open the reportInformationalMissing post-swap reserve validation in SwapExactOutZIGChain audit · Oak Security · 5 May 2026Fixed
The report gives no description here.
Open the reportInformationalSwapOut query type defined but not wired in custom querierZIGChain audit · Oak Security · 5 May 2026Fixed
The report gives no description here.
Open the reportShow 10 more
InformationalValidateBasic allows zero-amount coins that fail deeper in executionZIGChain audit · Oak Security · 5 May 2026Fixed
The report gives no description here.
Open the reportInformationalMsgStoreCode filter does not handle wrapped authz messagesZIGChain Update audit · Oak Security · 19 Dec 2025Fixed
The report gives no description here.
Open the reportInformationalRedundant codeZIGChain Update audit · Oak Security · 19 Dec 2025Fixed
The report gives no description here.
Open the reportInformationalRedundant config creation in a simulationZIGChain Update audit · Oak Security · 19 Dec 2025Fixed
The report gives no description here.
Open the reportInformationalRunning the test suite does not succeedZIGChain Update audit · Oak Security · 19 Dec 2025Fixed
The report gives no description here.
Open the reportInformationalSimulation of MsgRecoverZig does cover successful scenariosZIGChain Update audit · Oak Security · 19 Dec 2025Fixed
The report gives no description here.
Open the reportInformationalUnresolved TODO and FIXME commentsZIGChain Update audit · Oak Security · 19 Dec 2025Fixed
The report gives no description here.
Open the reportInformationalHardcoded gas price prevents flexible fee adjustment and creates operational riskZIGChain Reward Contract audit · Oak Security · 11 Nov 2025Fixed
The report gives no description here.
Open the reportInformationalMissing check to prevent pausing an already paused contractZIGChain Reward Contract audit · Oak Security · 11 Nov 2025Fixed
The report gives no description here.
Open the reportInformationalparseMessage regex should implement max message length validationZIGChain Reward Contract audit · Oak Security · 11 Nov 2025Fixed
The report gives no description here.
Open the reportShow 10 more
InformationalRemove unused code blocksZIGChain Reward Contract audit · Oak Security · 11 Nov 2025Fixed
The report gives no description here.
Open the reportInformationalTypo in CORS configurationZIGChain Reward Contract audit · Oak Security · 11 Nov 2025Fixed
The report gives no description here.
Open the reportInformationalUnregistered IpLoggerMiddlewareZIGChain Reward Contract audit · Oak Security · 11 Nov 2025Fixed
The report gives no description here.
Open the reportInformationalUnused getClaimsByWalletAddress functionZIGChain Reward Contract audit · Oak Security · 11 Nov 2025Fixed
The report gives no description here.
Open the reportInformationalAdministrative operations lack event emissionZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalCommented security logic creates code confusion and maintenance issuesZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalDeviation from specifications in BurnTokens may result in unauthorized burningZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalDocumentation incorrectly lists allowed characters in subdenomsZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalError events emitted for non-error cases may cause confusionZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalError handling can be improved using the %w formatterZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportShow 10 more
InformationalError when withdrawing validator commission during export is ignoredZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalHardcoded pool UID string construction reduces maintainabilityZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalIncorrect base and quote values returned after liquidity removalZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalIncorrect comments and unused types may cause confusionZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalIncorrect use of SignerCheck may cause confusionZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalInsufficient validation in ValidateBasic may lead to panicZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalMagic numbers used for pool formula validationZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalMiscellaneous commentsZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalMisleading error messages and commentsZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalMissing denom MaxSupply check may lead to incorrect statesZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportShow 10 more
InformationalMissing underflow protection in the token burned amount calculationZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalOne-step operator and admin transfer may lead to lost admin privilegesZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalOver-protective validations reduce code clarityZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalPool removal message is not implementedZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalPossibility to bypass fees by swapping very low amountsZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalPotential division by zero during token balance calculationZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalPotential non-unique pool UIDs due to denom separator collisionZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalPresence of debugging artifact in production codeZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalSwapped parameters in denom validation error messagesZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalToken wrapping rejects amounts that convert to zeroZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportShow 7 more
InformationalUnclear “invalid” state variable values in DefaultGenesisZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalUnnecessary metadata validation may cause confusionZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalUnnecessary scaleFactor implementation reduces calculation precisionZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalUnused functions and errors implemented in the codebaseZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalUnused governance authority for module parametersZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalUnused ibcv2TransferStack initialization may cause confusionZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportInformationalUse of magic string for factory denom delimiter reduces maintainabilityZIGChain audit · Oak Security · 25 Aug 2025Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="zigchain"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us