Fathom Stablecoin

OXORIORepository at commit 3768c87

OXORIO reviewed Fathom (Fathom Stablecoin) on 19 Jan 2024: 32 findings, 3 critical; 13 marked fixed, 19 acknowledged.

3 criticals acknowledged, not fixed
Open the reportOpen Fathom’s security record

Report hosted on audits.oxor.io.

Trustblock does not review code.

Findings32

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical030
High030
Medium065
Low078
MediumCasting to types in unsafe wayFixed

The report gives no description here.

MediumDisable initializers in upgradable contractsFixed

The report gives no description here.

MediumfeeRate is not limited in FlashMintModuleFixed

The report gives no description here.

MediumOutdated typing in FixedSpreadLiquidationStrategyFixed

The report gives no description here.

MediumRedundant check for totalStablecoinIssued in multiple contractsFixed

The report gives no description here.

LowAddress imported instead of AddressUpgradeable in BookKeeperFixed

The report gives no description here.

LowMissing require check in FlashMintModuleFixed

The report gives no description here.

LowObsolete comments in PositionManagerFixed

The report gives no description here.

LowRedundant ImportsFixed

The report gives no description here.

LowTypo in error message in FixedSpreadLiquidationStrategyFixed

The report gives no description here.

Show 3 more
LowTypo in PositionManagerFixed

The report gives no description here.

LowTypo in several contractsFixed

The report gives no description here.

LowUnsafe usage of abi.encodeWithSelector in SafeTokenFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (2)

  • https://github.com/Into-the-Fathom/fathom-stablecoin-smart-contracts/contracts/main/stablecoin-core/StableSwapModuleWrapper.sol at commit 3768c87367d286ae0e82f444b2f9d760417b507e
  • https://github.com/Into-the-Fathom/fathom-stablecoin-smart-contracts/contracts/main/stablecoin-core/StableSwapModule.sol at commit 3768c87367d286ae0e82f444b2f9d760417b507e

Part of Fathom’s security record

Fathom
Audits2 audits by 1 firmLast audit Jan 2024, by OXORIO.
Critical findings3 criticals acknowledged, not fixedReported in “Fathom Stablecoin” by OXORIO, Jan 2024. The team acknowledged all 3.
Open Fathom’s security record

Security firm

OXORIO

6 projects reviewed · 15 reports · latest Dec 2024

See OXORIO’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us