# Dora Vota Sponsor Module security audit

Dora Factory's Vota chain uses the x/sponsor-contract-tx Cosmos SDK module, audited here in Go, to let CosmWasm contracts sponsor users' transaction fees with per-user grant limits, an optional eligibility query and admin-managed funds.

Codezen audited Dora Vota Sponsor Module together with Oak Security. Technologies in scope: Golang and Cosmos SDK. We reported 15 findings: 1 critical, 1 major, 7 minor and 6 informational.

- Audit type: Cosmos SDK module audit
- Technologies: Golang, Cosmos SDK
- Ecosystem: Cosmos
- Delivered with: Oak Security
- Report date: 13 November 2025
- Full report (PDF): https://github.com/oak-security/audit-reports/blob/main/DoraFactory/2025-11-13%20Audit%20Report%20-%20Dora%20Vota%20Sponsor%20Module%20v1.0.pdf
- Project website: https://dorafactory.org
- Page: https://www.codezen.tech/audits/dora-factory-s-vota-sponsor-module/

## Findings by severity

| Severity | Count |
| --- | --- |
| Critical | 1 |
| Major | 1 |
| Minor | 7 |
| Info | 6 |
| Total | 15 |

Need a similar audit? Email info@codezen.tech or visit https://www.codezen.tech/.