AtomOne audit
Oak Security reviewed AtomOne (AtomOne audit) on 23 Apr 2026: 50 findings, 1 critical; 40 marked fixed, 10 acknowledged.
Report hosted on GitHub.
Statuses are the security firm’s own, from this report. Trustblock does not review code.
Findings50
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 1 | 7 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 9 | 32 |
HighMaxGovernors parameter is defined but never checkedAcknowledged
The report gives no description here.
LowA vetoed proposal is not removed from the quorum check queueAcknowledged
The report gives no description here.
LowDefault minimum governor self-delegation does not match the on-chain value set by the v4 upgradeAcknowledged
The report gives no description here.
LowHardcoded minStakedTokens is not governance-configurableAcknowledged
The report gives no description here.
LowMinGovernorSelfDelegation allows zero delegationsAcknowledged
The report gives no description here.
LowMissing event emission in UpdateParams reduces off-chain observabilityAcknowledged
The report gives no description here.
LowModule invariants are unreachable dead codeAcknowledged
The report gives no description here.
LowNo upper bound check on minted photons relative to MaxSupplyAcknowledged
The report gives no description here.
LowNo upper bound on proposal message countAcknowledged
The report gives no description here.
LowRemove unused keeper fields on the AppModule structAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of AtomOne’s security record
AtomOneSecurity firm
Oak Security33 projects reviewed · 60 reports · latest May 2026
See Oak Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us