atomiq.exchange security review

Cairo Security Clan25 Jul 2025Files named in the report

Audit · firm’s term: security review

Cairo Security Clan reviewed Atomiq Exchange (atomiq.exchange security review) on 25 Jul 2025: 6 findings, 0 critical; 3 marked fixed, 3 open.

No open critical findings

Open the report Open Atomiq Exchange’s security record

Report stored on IPFS. Content hash bafybeicmrutw6rjyoge2zujz4pyfndwqijbjabi4nnb6sieu7h5xxasisy

Trustblock does not review code.

Findings6

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	1
Medium	1	0	1
Low	2	0	1

Mediumsuccess action execution failures do not revert the claim transactionOpen

When claiming an escrow with a success action, the success action is executed immediately via an external call. If this execution fails, the transaction does not revert but only emits an error event, causing the success action to be lost with no retry or recovery mechanism.

Lowclaimer cannot initialize escrow with native ethOpen

The report gives no description here.

Lowdeposit function should use safe arithmetic operations like withdraw functionOpen

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (42)

contracts/utils/mathUtils.sol
contracts/spv_swap_vault/utils.sol
contracts/spv_swap_vault/structs/bitcoinVaultTransactionData.sol
contracts/btc_relay/state/btcRelayState.sol
contracts/btc_utils/endianness.sol
contracts/btc_relay/constants.sol
contracts/escrow_manager/components/reputationTracker.sol
contracts/spv_swap_vault/spvVaultManager.sol
contracts/btc_relay/utils/difficulty.sol
contracts/btc_utils/bitcoinMerkleTree.sol
contracts/spv_swap_vault/events.sol
contracts/escrow_manager/events.sol
contracts/escrow_manager/structs/escrow.sol
contracts/btc_relay/btcRelay.sol
contracts/transfer_utils/transferUtils.sol
contracts/escrow_manager/state/escrowState.sol
contracts/spv_swap_vault/state/spvVaultState.sol
contracts/timelock_refund_handler/timeLockRefundHandler.sol
contracts/execution_proxy/executionProxy.sol
contracts/spv_swap_vault/structs/spvVaultParameters.sol
contracts/hashlock_claim_handler/hashlockClaimHandler.sol
contracts/btc_relay/structs/storedBlockHeader.sol
contracts/execution_proxy/executor.sol
contracts/common/iRefundHandler.sol
contracts/btc_relay/structs/compactBlockHeader.sol
contracts/common/iClaimHandler.sol
contracts/btc_output_claim_handler/bitcoinOutputClaimHandler.sol
contracts/execution_proxy/structs/executionAction.sol
contracts/execution_contract/executionContract.sol
contracts/btc_relay/events.sol
contracts/btc_txid_claim_handler/bitcoinTxIdClaimHandler.sol
contracts/btc_nonced_output_claim_handler/bitcoinNoncedOutputClaimHandler.sol
contracts/escrow_manager/components/lpVault.sol
contracts/btc_utils/bitcoinTx.sol
contracts/execution_contract/events.sol
contracts/execution_contract/structs/execution.sol
contracts/escrow_manager/components/escrowStorage.sol
contracts/escrow_manager/components/eip712SigHash.sol
contracts/btc_relay/utils/nbits.sol
contracts/escrow_manager/escrowManager.sol
contracts/execution_proxy/structs/contractCall.sol
contracts/escrow_manager/state/reputationState.sol

Part of Atomiq Exchange’s security record

Atomiq Exchange

Audits3 audits by 2 firmsLast audit Jul 2025, by Cairo Security Clan.

Critical findingsNo open critical findingsAcross the 3 reports, 3 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Atomiq Exchange’s security record

Security firm

Cairo Security Clan

13 projects reviewed · 21 reports · latest Sep 2025

See Cairo Security Clan’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.