security review atomiq.exchange

Cairo Security ClanRepository at commit 50596c8

Audit · firm’s term: security review

Cairo Security Clan reviewed Atomiq Exchange (security review atomiq.exchange) on 7 Apr 2025: 9 findings, 0 critical; 4 marked fixed, 5 open.

No open critical findings
Open the reportOpen Atomiq Exchange’s security record
Report stored on IPFS. Content hash bafybeih56fjrsv6lpk6bmsccxkxmfkxj42zbnmya7vzbrjjemkof3z5x5m

Trustblock does not review code.

Findings9

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High102
Medium000
Low402
Highfronting unconfirmed bitcoin transactions can cause fronters to lose fundsOpen

The report gives no description here.

Lowclaim_data is emitted instead of refund_data even in refund functionOpen

The report gives no description here.

Lowlack of support camel-case naming erc20 tokensOpen

The report gives no description here.

Lowsame swap cannot be executed twiceOpen

The report gives no description here.

Lowunused input parameter extra_dataOpen

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (27)

  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/btc_relay/src/structs.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/btc_relay/src/lib.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/spv_swap_vault/src/utils.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/erc20_utils/src/lib.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/escrow_manager/src/components/reputation.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/escrow_manager/src/state.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/btc_relay/src/constants.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/btc_utils/src/bitcoin_tx.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/escrow_manager/src/components.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/btc_utils/src/lib.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/btc_utils/src/bitcoin_merkle_tree.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/escrow_manager/src/lib.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/escrow_manager/src/components/lp_vault.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/src/lib.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/escrow_manager/src/events.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/spv_swap_vault/src/state.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/escrow_manager/src/sighash.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/escrow_manager/src/structs.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/spv_swap_vault/src/events.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/spv_swap_vault/src/lib.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/btc_relay/src/utils.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/spv_swap_vault/src/structs.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/escrow_manager/src/utils.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/btc_relay/src/state.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/btc_utils/src/compact_size.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/escrow_manager/src/components/escrow_storage.cairo at commit 50596c81bae561a1ebc161c362221800d7429396
  • https://github.com/atomiqlabs/atomiq-contracts-starknet/packages/btc_utils/src/byte_array.cairo at commit 50596c81bae561a1ebc161c362221800d7429396

Part of Atomiq Exchange’s security record

Atomiq Exchange
Audits3 audits by 2 firmsLast audit Jul 2025, by Cairo Security Clan.
Critical findingsNo open critical findingsAcross the 3 reports, 3 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Atomiq Exchange’s security record

Security firm

Cairo Security Clan

13 projects reviewed · 21 reports · latest Sep 2025

See Cairo Security Clan’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us