Formal Verification

HalbornCode version: not recorded (see the report)

Audit · firm’s term: smart contract assessment

Halborn reviewed Fathom (Formal Verification) on 12 Mar 2026: no findings reported.

No open critical findings
Open the reportOpen Fathom’s security record

Report hosted on halborn.com.

Trustblock does not review code.

Findings6

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium000
Low000

Marked Informational by the firm. Not counted as findings.

InformationalInherited eMode liquidation uses wrong debt price source when debt asset is removed from eMode categoryAcknowledged

The report gives no description here.

InformationalOracle staleness protection relies on feed provider guarantees and Off-Chain monitoringAcknowledged

The report gives no description here.

InformationalRounding vulnerability in supply/withdraw cycles allows extraction of underlying tokens from low-decimal high-value reservesAcknowledged

The report gives no description here.

InformationalAbsence of documentation on supported asset decimal rangesFixed

The report gives no description here.

InformationalSeveral contracts are not source-verified on XDCScanFixed

The report gives no description here.

InformationalSPDX license identifier mismatch between deployed and audited sourceFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Fathom’s security record

Fathom
Audits3 audits by 2 firmsLast audit Mar 2026, by Halborn.
Critical findings3 criticals acknowledged, not fixedReported in “Fathom Stablecoin” by OXORIO, Jan 2024. The team acknowledged all 3.
Open Fathom’s security record

Security firm

Halborn

36 projects reviewed · 80 reports · latest Oct 2026

See Halborn’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us