Ostium security review

Pashov Audit Group10 Sep 2025Code version: not recorded (see the report)

Pashov Audit Group reviewed Ostium (Ostium security review) on 10 Sep 2025: 9 findings, 0 critical; 7 marked fixed, 2 acknowledged.

No open critical findings

Open the report Open Ostium’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings9

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	1
Low	0	2	6

MediumInflated trade notional in price impact calculationsFixed

The report gives no description here.

LowgetTradeRolloverFeePure() returns 1 not 0 when end is less than or equal to accFixed

The report gives no description here.

LowIncorrect assignment of lastUpdateBlock in migrateRolloverFeesV2()Fixed

The report gives no description here.

LowIncorrect lastLongPure validationFixed

The report gives no description here.

LowpairMinLevPos can be bypassedFixed

The report gives no description here.

LowTrades fail as registerTrade() underflows from builderFeeFixed

The report gives no description here.

LowUnderflow risk in unregisterTrade() when rollover fees equals collateralFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Ostium’s security record

Ostium

Audits5 audits by 2 firmsLast audit Sep 2025, by Pashov Audit Group.

Critical findingsNo open critical findingsAcross the 5 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Ostium’s security record

Security firm

Pashov Audit Group

30 projects reviewed · 53 reports · latest Jul 2026

See Pashov Audit Group’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.