AtomOne audit
Audit · firm’s term: security audit
Oak Security reviewed AtomOne (AtomOne audit) on 23 Apr 2026: 30 findings, 1 critical; 26 marked fixed, 4 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings50
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 1 | 7 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 3 | 18 |
Marked Informational by the firm. Not counted as findings.
InformationalA vetoed proposal is not removed from the quorum check queueAcknowledged
The report gives no description here.
InformationalDefault minimum governor self-delegation does not match the on-chain value set by the v4 upgradeAcknowledged
The report gives no description here.
InformationalHardcoded minStakedTokens is not governance-configurableAcknowledged
The report gives no description here.
InformationalMinGovernorSelfDelegation allows zero delegationsAcknowledged
The report gives no description here.
InformationalNo upper bound on proposal message countAcknowledged
The report gives no description here.
InformationalRemove unused keeper fields on the AppModule structAcknowledged
The report gives no description here.
InformationalEditGovernor overwrites the full description instead of merging fieldsFixed
The report gives no description here.
InformationalEndBlocker ordering contradicts documentationFixed
The report gives no description here.
InformationalIncorrect module name referenced in error commentFixed
The report gives no description here.
InformationalMisleading --from [granter] placeholder in prune-grants CLI commandFixed
The report gives no description here.
Show 10 more
InformationalMissing MsgAnnotateProposal annotation length validationFixed
The report gives no description here.
InformationalMissing Use field for GovernanceDelegation query CLI commandFixed
The report gives no description here.
InformationalNo validation that the steering DAO and oversight DAO addresses are differentFixed
The report gives no description here.
InformationalParticipation EMA values not validated in genesisFixed
The report gives no description here.
InformationalSpelling and grammar issues across the codebaseFixed
The report gives no description here.
InformationalUnhandled collection walk errors are silently discardedFixed
The report gives no description here.
InformationalV4 upgrade handler sources the MinDepositRatio and GovernorStatusChangePeriod governance parameter defaults from the Cosmos SDK fork instead of the AtomOne definitionsFixed
The report gives no description here.
InformationalValidateTrustLevel function is dead codeFixed
The report gives no description here.
InformationalVerifyLightCommit error message reports incorrect voting power thresholdFixed
The report gives no description here.
InformationalWrong variable in the error message for the MaximumCoefficient validationFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of AtomOne’s security record
AtomOneSecurity firm
Oak Security33 projects reviewed · 59 reports · latest May 2026
See Oak Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us