Ostium security assessment

ZellicCode version: not recorded (see the report)

Zellic reviewed Ostium (Ostium security assessment) on 22 Feb 2024: 17 findings, 2 critical; 12 marked fixed, 5 acknowledged.

2 critical findings, fixed
Open the reportOpen Ostium’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings17

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical002
High012
Medium015
Low033
CriticalOrder ID reuse due to multiple PriceUpkeepsFixed

The report gives no description here.

CriticalTraders can increase collateral without paying more tokensFixed

The report gives no description here.

HighIncorrect funding-rate calculationFixed

The report gives no description here.

HighTotal open PNL improperly adjusted at zero priceFixed

The report gives no description here.

MediumIncorrect funding-rate calculation due to roundingFixed

The report gives no description here.

MediumPremium price feeds are not used for premium feed pairsFixed

The report gives no description here.

MediumThe maxAllowedCollateral check could be bypassed using topUpCollateralFixed

The report gives no description here.

MediumThe utilizationFee is divided by an extra PRECISION_6Fixed

The report gives no description here.

MediumThe value of groupsCollaterals could exceed groupMaxCollateralFixed

The report gives no description here.

LowAny allowance allows unlimited withdrawal changesFixed

The report gives no description here.

Show 2 more
LowMarket-close time-out reissuance can be skippedFixed

The report gives no description here.

LowUnexecutable trades might be added to tradesToTriggerFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Ostium’s security record

Ostium
Audits5 audits by 2 firmsLast audit Sep 2025, by Pashov Audit Group.
Critical findingsNo open critical findingsAcross the 5 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Ostium’s security record

Security firm

Zellic

28 projects reviewed · 31 reports · latest Apr 2026

See Zellic’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us