atomiq.exchange security review

Cairo Security Clan25 Jul 2025Files named in the report

Audit · firm’s term: security review

Cairo Security Clan reviewed Atomiq Exchange (atomiq.exchange security review) on 25 Jul 2025: 6 findings, 0 critical; 3 marked fixed, 3 open.

No open critical findings

Open the report Open Atomiq Exchange’s security record

Report stored on IPFS. Content hash bafybeicmrutw6rjyoge2zujz4pyfndwqijbjabi4nnb6sieu7h5xxasisy

Trustblock does not review code.

Findings6

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	1
Medium	1	0	1
Low	2	0	1

Highfront-running issue in executioncontract.create allows blocking of legitimate spvswapvault transactionsFixed

The executioncontract.create function is permissionless and allows anyone to create an execution commitment for any owner with any salt. Attackers can frontrun legitimate transactions by calling create with the same parameters, causing those transactions to revert with a "create already initiated" error, blocking users from accessing their funds.

Mediumattacker can intentionally limit gas to sabotage the success action executionFixed

The report gives no description here.

Lowmisleading parameter name src in _payout functionFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (42)

contracts/utils/mathUtils.sol
contracts/spv_swap_vault/utils.sol
contracts/spv_swap_vault/structs/bitcoinVaultTransactionData.sol
contracts/btc_relay/state/btcRelayState.sol
contracts/btc_utils/endianness.sol
contracts/btc_relay/constants.sol
contracts/escrow_manager/components/reputationTracker.sol
contracts/spv_swap_vault/spvVaultManager.sol
contracts/btc_relay/utils/difficulty.sol
contracts/btc_utils/bitcoinMerkleTree.sol
contracts/spv_swap_vault/events.sol
contracts/escrow_manager/events.sol
contracts/escrow_manager/structs/escrow.sol
contracts/btc_relay/btcRelay.sol
contracts/transfer_utils/transferUtils.sol
contracts/escrow_manager/state/escrowState.sol
contracts/spv_swap_vault/state/spvVaultState.sol
contracts/timelock_refund_handler/timeLockRefundHandler.sol
contracts/execution_proxy/executionProxy.sol
contracts/spv_swap_vault/structs/spvVaultParameters.sol
contracts/hashlock_claim_handler/hashlockClaimHandler.sol
contracts/btc_relay/structs/storedBlockHeader.sol
contracts/execution_proxy/executor.sol
contracts/common/iRefundHandler.sol
contracts/btc_relay/structs/compactBlockHeader.sol
contracts/common/iClaimHandler.sol
contracts/btc_output_claim_handler/bitcoinOutputClaimHandler.sol
contracts/execution_proxy/structs/executionAction.sol
contracts/execution_contract/executionContract.sol
contracts/btc_relay/events.sol
contracts/btc_txid_claim_handler/bitcoinTxIdClaimHandler.sol
contracts/btc_nonced_output_claim_handler/bitcoinNoncedOutputClaimHandler.sol
contracts/escrow_manager/components/lpVault.sol
contracts/btc_utils/bitcoinTx.sol
contracts/execution_contract/events.sol
contracts/execution_contract/structs/execution.sol
contracts/escrow_manager/components/escrowStorage.sol
contracts/escrow_manager/components/eip712SigHash.sol
contracts/btc_relay/utils/nbits.sol
contracts/escrow_manager/escrowManager.sol
contracts/execution_proxy/structs/contractCall.sol
contracts/escrow_manager/state/reputationState.sol

Part of Atomiq Exchange’s security record

Atomiq Exchange

Audits3 audits by 2 firmsLast audit Jul 2025, by Cairo Security Clan.

Critical findingsNo open critical findingsAcross the 3 reports, 3 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Atomiq Exchange’s security record

Security firm

Cairo Security Clan

13 projects reviewed · 21 reports · latest Sep 2025

See Cairo Security Clan’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.