Origin Dollar Audit
Audit · firm’s term: audit
OpenZeppelin reviewed Origin Protocol (Origin Dollar Audit) on 25 Oct 2021: 30 findings, 1 critical; 13 marked fixed, 17 open.
Report hosted on blog.openzeppelin.com.
Trustblock does not review code.
Findings30
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 2 | 0 | 3 |
| Medium | 3 | 0 | 2 |
| Low | 12 | 0 | 7 |
High[H02] Valid redemptions may failOpen
The report gives no description here.
High[H04] Incorrect slippage in Curve 3Pool strategyOpen
The report gives no description here.
Medium[M02] Not enforcing a default strategy for new assetsOpen
The report gives no description here.
Medium[M03] Not checking asset balance in strategy before removalOpen
The report gives no description here.
Medium[M05] Excessive Curve 3Pool withdrawalOpen
The report gives no description here.
Low[L01] Unhandled token transfer feesOpen
The report gives no description here.
Low[L02] Cannot redeem from both accounts simultaneouslyOpen
The report gives no description here.
Low[L03] Residual token allowanceOpen
The report gives no description here.
Low[L04] Rounding down in OUSD calculationsOpen
The report gives no description here.
Low[L08] Simplify redeem outputs calculationOpen
The report gives no description here.
Show 7 more
Low[L09] Mixing testing and production codeOpen
The report gives no description here.
Low[L12] Function selectors between VaultCore and VaultAdmin could collideOpen
The report gives no description here.
Low[L13] Lack of event emission after sensitive actionsOpen
The report gives no description here.
Low[L14] Incomplete event emissionsOpen
The report gives no description here.
Low[L16] Lack of indexed parameters in eventsOpen
The report gives no description here.
Low[L17] Not using safeTransferOpen
The report gives no description here.
Low[L18] Implicit castingOpen
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (4)
- contracts/contracts/oracle/ChainlinkOracle.sol
- contracts/contracts/oracle/MixOracle.sol
- contracts/contracts/vault/VaultAdmin.sol
- contracts/contracts/vault/VaultCore.sol
Part of Origin Protocol’s security record
Origin ProtocolSecurity firm
OpenZeppelin67 projects reviewed · 184 reports · latest Aug 2026
See OpenZeppelin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us