Ostium security review

Pashov Audit GroupCode version: not recorded (see the report)

Pashov Audit Group reviewed Ostium (Ostium security review) on 28 Jan 2025: 13 findings, 0 critical; 8 marked fixed, 5 acknowledged.

No open critical findings
Open the reportOpen Ostium’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings13

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High001
Medium023
Low034
HighUndervalued funding fee when accFundingRate is negativeFixed

The report gives no description here.

MediumThe correctTp() returns overinflated valuesFixed

The report gives no description here.

MediumupdateTp not validating and correcting the TPFixed

The report gives no description here.

MediumUsers can prevent oracle fee chargingFixed

The report gives no description here.

LowAn invariant can be brokenFixed

The report gives no description here.

LowMissing validation for MAX_TRADE_SIZE_REFFixed

The report gives no description here.

LowNew PairFundingFeesV2 parameters are not validatedFixed

The report gives no description here.

LowRemoving listed pair will disallow closing tradesFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Ostium’s security record

Ostium
Audits5 audits by 2 firmsLast audit Sep 2025, by Pashov Audit Group.
Critical findingsNo open critical findingsAcross the 5 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Ostium’s security record

Security firm

Pashov Audit Group

30 projects reviewed · 53 reports · latest Jul 2026

See Pashov Audit Group’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us