Skip to main content
Audit Open Original ↗

Offchain Labs Arbitrum ArbOS 60/61

Type

Security review

Client

Offchain Labs

Date

2026-07

Domain

Blockchain

Effort

24 wks

Section

Offchain Labs

Trail of Bits's security review of Offchain Labs (Jul 2026) identified 9 issues: 1 high, and 8 informational.

Findings · 9

  1. 1 Non-deterministic map iteration in multi-gas constraint precompiles High
  2. 2 Gas is charged after state read Informational
  3. 3 Inconsistent write-protection on ArbOS state handle in block production Informational
  4. 4 RevertToSnapshot after Finalise causes a panic in extraPostTxFilter error path Informational
  5. 5 Stale per-dimension base fees are reused when multi-gas constraints are re-enabled Informational
  6. 6 The initial-backlog cap can be bypassed by under-supplying gas to the constraint validation Informational
  7. 7 The base-fee cap exponent delivers ~365x instead of the documented ~5,000x Informational
  8. 8 A SingleDim resource weight is accepted and can under-prices every other dimension Informational
  9. 9 Saturating multiplication collapses the constraint exponent and bypasses the initial-backlog cap Informational

Findings extracted from the published report PDF. See the full report below for details and remediation.

Related