Layer 1 Security Reviews for Protocols, VMs, Consensus, and Runtime Logic

Taran.Space has delivered 6 strict Layer 1 network projects across consensus-sensitive protocol logic, execution layers, virtual machines, node safety, validator upgrade flows, and custom chain modules. The work covers Dusk, Dymension, GnoLand, Stellar, THORChain, and ZIGChain, spanning Rust, Go, Cosmos SDK, VM/interpreter security, protocol upgrades, and chain-level execution risks.

L1
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
July-August 2025
Security Audit
In partnership with Oak

Stellar is a major blockchain infrastructure network for payments, tokenized assets, and financial applications. The work was delivered through public Oak Security engagements and covered Stellar Core protocol updates, with focus on correctness and consensus-sensitive changes that affect secure network operation.

Review scope included protocol logic, metering behavior, Soroban-adjacent execution, cryptographic components, and implementation details across Rust and C++ code. The work focused on changes where subtle correctness issues could affect transaction processing, resource accounting, smart-contract execution behavior, or the reliability of protocol upgrades.

L1
Rust
C++
Rust
L1
C++
Virtual Machines
Stellar
All Reports
In partnership with Oak
October 2024
Security Audit
In partnership with Oak Security

THORChain is a cross-chain liquidity network that enables native asset swaps across blockchain ecosystems. We contributed to Oak Security’s review of THORChain hard-fork-related validator and Cosmos upgrade logic, focusing on protocol-update safety for the network.

The work covered validator-scheduled upgrade behavior, Cosmos hard-fork assumptions, Go implementation details, and failure modes that could affect network coordination during protocol transitions.

Cross-Chain
L1
Cosmos
Cross-Chain
L1
Cosmos
Go
View report
In partnership with Oak Security
July 2024
Security Audit
In partnership with Oak

Dusk is a Layer 1 network designed for regulated financial applications, combining privacy-oriented architecture with custom protocol and execution components. We contributed to Oak Security’s review of Dusk’s Rusk node and consensus-related logic, with focus on protocol correctness, node safety, and invariants that protect network operation.

The work examined failure modes that could lead to network halts, consensus failures, or economic attacks. Scope included Rust implementation details, protocol-level assumptions, and execution-layer behavior in security-critical parts of the Dusk stack.

January-March 2025
Security Audit
In partnership with Oak

GnoLand is a Layer 1 smart-contract platform built around Gno, an interpreted and deterministic language derived from Go. In public Oak Security engagements, we reviewed GnoLand’s smart-contract and execution infrastructure, including the on-chain Gno language interpreter.

The work covered interpreter behavior, VM and runtime assumptions, memory-management behavior around garbage collection, type-checking logic, contract execution, and the correctness of core platform components.

Go
Virtual Machines
L1
Cosmos
Virtual Machines
Go
All reports
In partnership with Oak
March-April, November 2024
Security Audit
In partnership with Oak Security

Dymension is a Cosmos-based network for modular appchains and RollApps, combining Cosmos SDK infrastructure with execution-layer components derived from the RDK and EVMOS stack. Across several Oak Security reports, our work covered core network logic, Cosmos SDK modules, and EVM-compatible execution surfaces involved in Dymension’s protocol architecture.

The reviews focused on chain-level correctness, upgrade and execution assumptions, module behavior, and the interaction between Cosmos-native infrastructure and EVM-facing components. The project adds a strong Cosmos, Go, and EVM protocol-security case to the portfolio.

Cosmos
L2
Cross-Chain
L1
L2
Cross-Chain
Cosmos
Go
EVM
All reports
In partnership with Oak Security
August-December 2025
Security Audit
In partnership with Oak

ZIGChain is a Cosmos-based Layer 1 focused on wealth management, DeFi infrastructure, and on-chain financial applications. The audits were published by Oak Security, with our work covering multiple ZIGChain releases across custom chain modules, the x/dex module, reward-contract logic, and updates across Cosmos SDK, CosmWasm, and EVM-compatible integration surfaces.

The work spanned application-level DeFi behavior and chain infrastructure, including swap and DEX logic, reward accounting, module validation paths, smart-contract execution assumptions, and the operational safety of financial flows built into the network.

Cosmos
DeFi
DEX
DeFi
DEX
L1
Cosmos
Go
EVM
Rust
All reports
In partnership with Oak
June 2023
Security Audit
In partnership with Oak

This library is a Rust implementation of Ethereum’s Simple Serialize (SSZ) format, used for consensus-critical data structures in Ethereum protocol software. The public Oak Security audit included our review of serialization correctness, safety invariants, and edge cases in code that handles structured protocol data.

Review scope covered SSZ encoding and decoding behavior, Merkleization-related assumptions, data-structure boundaries, and hardening against cases that could affect consensus-client reliability or proof-related logic.

September-October 2024, August 2025
Security Audit
In partnership with Oak Security.

MANTRA is an EVM-compatible Layer 1 built around real-world assets and on-chain financial infrastructure. Our Oak Security work covered multiple MANTRA tracks, including DEX functionality, airdrop logic, and later claimdrop-update components across the MANTRA ecosystem.

The reviews focused on DeFi execution paths, token distribution flows, smart-contract correctness, and integration surfaces across Cosmos, EVM, Solidity, Rust, and Go components. The project adds a broad real-world-asset DeFi case with both chain-level and application-level security scope.

Cosmos
DeFi
DEX
L1
DeFi
DEX
Cosmos
Go
EVM
Solidity
Rust
All reports
In partnership with Oak Security.
No items found.

Contact

Tell us what you’re building and what kind of security support you need. Telegram is usually the fastest way to reach us. For formal inquiries, you can also use email.

Thank you for your inquiry! We've received your message and will respond soon.
Oops! Something went wrong while submitting the form.