Osmosis Labs October 12, 2023
Osmosis Authentication Abstraction
Findings Impact LevelCount
Critical2
High2
Medium2
Low3
Informational1
Prepared by
About
The x/authenticators module implements a drop-in replacement for the Cosmos SDK’s signature-validation ante handler but introduces much more flexibility by allowing users to attach configurable pieces of code (authenticators) to their accounts that will be used to determine if a transaction can be executed.
Executive Summary
Zellic conducted a security assessment for Osmosis Labs from September 25th to October 4th, 2023. During this engagement, Zellic reviewed Osmosis Authentication Abstraction's code for security vulnerabilities, design issues, and general weaknesses in security posture.