Alto security record
As of 24 Oct 2026, Alto has 4 audit reports by 1 security firm on Trustblock; the latest is by Cantina, dated 26 Sep 2026. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits4
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Alto Money: v1 | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Alto Money: v1 Basemarket Changes | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| AltoMoney: Phaze Solo Review | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
| Alto Money v1 | Security firm: Cantina | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · cantina.xyz |
Findings4
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 1 | 3 |
Marked Informational or Gas Optimization by the firms. Not counted as findings.
InformationalDUSD is closely linked to frxUSD through the liquidation USMAlto Money: v1 Basemarket Changes · Cantina · 1 Jul 2026Acknowledged
The report gives no description here.
Open the reportInformationalIn-place upgrades from legacy USM to advanced USM can misconfigure access stateAlto Money: v1 Basemarket Changes · Cantina · 1 Jul 2026Acknowledged
The report gives no description here.
Open the reportInformationalIndependent USM caps can create liquidation configuration footgunsAlto Money: v1 Basemarket Changes · Cantina · 1 Jul 2026Acknowledged
The report gives no description here.
Open the reportGas OptimizationLiquidation token flow could be simplified or separated more clearlyAlto Money: v1 Basemarket Changes · Cantina · 1 Jul 2026Acknowledged
The report gives no description here.
Open the reportInformationalUSM seize could handle accrued stable-token fees more explicitlyAlto Money: v1 Basemarket Changes · Cantina · 1 Jul 2026Acknowledged
The report gives no description here.
Open the reportInformationalFront-running vulnerability in signature-based authorizationAlto Money v1 · Cantina · 8 Dec 2025Acknowledged
The report gives no description here.
Open the reportInformationalMissing validation in fee strategy update functionAlto Money v1 · Cantina · 8 Dec 2025Acknowledged
The report gives no description here.
Open the reportInformationalOptional fee calculation may enable arbitrage opportunitiesAlto Money v1 · Cantina · 8 Dec 2025Acknowledged
The report gives no description here.
Open the reportInformationalBorrow-token exclusion prevents forwarding DUSD rewardsAlto Money: v1 · Cantina · 26 Sep 2026Fixed
The report gives no description here.
Open the reportInformationalPermissionless collateral donations can front-run credit-account rotationAlto Money: v1 · Cantina · 26 Sep 2026Fixed
The report gives no description here.
Open the reportShow 10 more
InformationalZero-interest accrual emits events unlike the Mint marketAlto Money: v1 · Cantina · 26 Sep 2026Fixed
The report gives no description here.
Open the reportGas OptimizationAdvanced fee strategy can pack fee values into smaller storage typesAlto Money: v1 Basemarket Changes · Cantina · 1 Jul 2026Fixed
The report gives no description here.
Open the reportInformationalAdvanced USM compatibility is not explicitly discoverableAlto Money: v1 Basemarket Changes · Cantina · 1 Jul 2026Fixed
The report gives no description here.
Open the reportInformationalLiquidation events could use the original liquidator for easier indexingAlto Money: v1 Basemarket Changes · Cantina · 1 Jul 2026Fixed
The report gives no description here.
Open the reportInformationalSupported market removal could avoid external validation callsAlto Money: v1 Basemarket Changes · Cantina · 1 Jul 2026Fixed
The report gives no description here.
Open the reportInformationalCurrent guardian can indefinitely block its own replacement by revoking pending guardian transitionsAltoMoney: Phaze Solo Review · Cantina · 18 Jun 2026Fixed
The report gives no description here.
Open the reportInformationalDust share positions can prevent immediate cleanup-only full unwind during reallocationAltoMoney: Phaze Solo Review · Cantina · 18 Jun 2026Fixed
The report gives no description here.
Open the reportInformationalerc4626Mint() and erc4626Withdraw() do not sweep leftover tokens unlike USM counterpartsAltoMoney: Phaze Solo Review · Cantina · 18 Jun 2026Fixed
The report gives no description here.
Open the reportInformationalLost asset recovery mechanism and its accounting implications should be documented more thoroughlyAltoMoney: Phaze Solo Review · Cantina · 18 Jun 2026Fixed
The report gives no description here.
Open the reportInformationalRe-enabling a removed market double-counts stale vault supply and inflates accountingAltoMoney: Phaze Solo Review · Cantina · 18 Jun 2026Fixed
The report gives no description here.
Open the reportShow 6 more
Gas OptimizationSupply to markets proceeds with stale interest data when interest accrual is blockedAltoMoney: Phaze Solo Review · Cantina · 18 Jun 2026Fixed
The report gives no description here.
Open the reportInformationalVault accounting assumes it is not configured as a borrow market fee recipientAltoMoney: Phaze Solo Review · Cantina · 18 Jun 2026Fixed
The report gives no description here.
Open the reportInformationalCode quality improvementsAlto Money v1 · Cantina · 8 Dec 2025Fixed
The report gives no description here.
Open the reportInformationalInsufficient minimum amount validation in asset purchaseAlto Money v1 · Cantina · 8 Dec 2025Fixed
The report gives no description here.
Open the reportInformationalManual decimal specification may lead to configuration errorsAlto Money v1 · Cantina · 8 Dec 2025Fixed
The report gives no description here.
Open the reportInformationalMissing events for configuration tracking in fee and price strategiesAlto Money v1 · Cantina · 8 Dec 2025Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="alto"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us