Fathom Stablecoin
OXORIO reviewed Fathom (Fathom Stablecoin) on 19 Jan 2024: 32 findings, 3 critical; 13 marked fixed, 19 acknowledged.
Report hosted on audits.oxor.io.
Trustblock does not review code.
Findings32
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 3 | 0 |
| High | 0 | 3 | 0 |
| Medium | 0 | 6 | 5 |
| Low | 0 | 7 | 8 |
CriticalConfiguration addresses are not updatable in FathomProxyWalletOwnerAcknowledged
The report gives no description here.
CriticalMissing overflow checks in PluginPriceOracleAcknowledged
The report gives no description here.
CriticalPossibility of misconfiguration in FathomProxyWalletOwnerAcknowledged
The report gives no description here.
HighAdd migration mechanism in CollateralPoolConfigAcknowledged
The report gives no description here.
HighMissing setOwner function in FathomProxyWalletOwner, FathomProxyWalletOwnerUpgradeableAcknowledged
The report gives no description here.
HighOwner fails to receive native token transfer in FathomProxyWalletOwnerAcknowledged
The report gives no description here.
MediumAddresses are not validated in FathomProxyWalletOwnerAcknowledged
The report gives no description here.
MediumDDOS attack in FathomProxyWalletOwnerUpgradeableAcknowledged
The report gives no description here.
MediumLack of sanity check in CollateralPoolConfigAcknowledged
The report gives no description here.
MediumReceived amount of stablecoin is not validated in FathomProxyWalletOwnerUpgradeableAcknowledged
The report gives no description here.
Show 9 more
MediumValidation of _debtFloor in CollateralPoolConfigAcknowledged
The report gives no description here.
MediumValidation of _totalDebtCeiling in BookKeeperAcknowledged
The report gives no description here.
LowCheck is not performed prior to sending funds in FathomProxyWalletOwnerAcknowledged
The report gives no description here.
LowGas consumption limitations for integrators in FathomStablecoinProxyActionsAcknowledged
The report gives no description here.
LowImpossible to withdraw partial amountAcknowledged
The report gives no description here.
LowTransfer amount validation in FathomProxyWalletOwnerUpgradeableAcknowledged
The report gives no description here.
LowTypo in FathomProxyWalletOwnerAcknowledged
The report gives no description here.
LowUse of outdated librariesAcknowledged
The report gives no description here.
LowValidation is redundant in FathomProxyWalletOwner, FathomProxyWalletOwnerUpgradeableAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (2)
- https://github.com/Into-the-Fathom/fathom-stablecoin-smart-contracts/contracts/main/stablecoin-core/StableSwapModuleWrapper.sol at commit 3768c87367d286ae0e82f444b2f9d760417b507e
- https://github.com/Into-the-Fathom/fathom-stablecoin-smart-contracts/contracts/main/stablecoin-core/StableSwapModule.sol at commit 3768c87367d286ae0e82f444b2f9d760417b507e
Part of Fathom’s security record
Security firm
OXORIO6 projects reviewed · 15 reports · latest Dec 2024
See OXORIO’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us