Fathom security record

As of 2 Nov 2026, Fathom has 2 audit reports by 1 security firm on Trustblock; the latest is by OXORIO, dated 19 Jan 2024. Those reports list 3 criticals acknowledged and not fixed.

Critical findings
3 criticals acknowledged, not fixed
Reported in “Fathom Stablecoin” by OXORIO, Jan 2024. The team acknowledged all 3. See the findings
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits, findings and contracts up to Nov 2026, and incidents up to Oct 2026. Trustblock does not review code.

Audits2

Newest first

AuditSecurity firmDateScopeCritical findingsReport
Fathom StablecoinSecurity firm: OXORIODate: Scope: Repository at commit 3768c873 criticals acknowledged, not fixedOpen · audits.oxor.io
Fathom DAOSecurity firm: OXORIODate: Scope: Repository at commit 5e9f3a28 critical findings, fixedOpen · audits.oxor.io

Findings107

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical038
High0425
Medium01119
Low01324
CriticalConfiguration addresses are not updatable in FathomProxyWalletOwnerFathom Stablecoin · OXORIO · 19 Jan 2024Acknowledged

The report gives no description here.

Open the report
CriticalMissing overflow checks in PluginPriceOracleFathom Stablecoin · OXORIO · 19 Jan 2024Acknowledged

The report gives no description here.

Open the report
CriticalPossibility of misconfiguration in FathomProxyWalletOwnerFathom Stablecoin · OXORIO · 19 Jan 2024Acknowledged

The report gives no description here.

Open the report
HighAdd migration mechanism in CollateralPoolConfigFathom Stablecoin · OXORIO · 19 Jan 2024Acknowledged

The report gives no description here.

Open the report
HighMissing setOwner function in FathomProxyWalletOwner, FathomProxyWalletOwnerUpgradeableFathom Stablecoin · OXORIO · 19 Jan 2024Acknowledged

The report gives no description here.

Open the report
HighOwner fails to receive native token transfer in FathomProxyWalletOwnerFathom Stablecoin · OXORIO · 19 Jan 2024Acknowledged

The report gives no description here.

Open the report
HighCalling unlock, earlyUnlock and unlockPartially before claimRewards will result in loss of rewards in StakingHandlersFathom DAO · OXORIO · 18 Jan 2023Acknowledged

The report gives no description here.

Open the report
MediumAddresses are not validated in FathomProxyWalletOwnerFathom Stablecoin · OXORIO · 19 Jan 2024Acknowledged

The report gives no description here.

Open the report
MediumDDOS attack in FathomProxyWalletOwnerUpgradeableFathom Stablecoin · OXORIO · 19 Jan 2024Acknowledged

The report gives no description here.

Open the report
MediumLack of sanity check in CollateralPoolConfigFathom Stablecoin · OXORIO · 19 Jan 2024Acknowledged

The report gives no description here.

Open the report
Show 10 more
MediumReceived amount of stablecoin is not validated in FathomProxyWalletOwnerUpgradeableFathom Stablecoin · OXORIO · 19 Jan 2024Acknowledged

The report gives no description here.

Open the report
MediumValidation of _debtFloor in CollateralPoolConfigFathom Stablecoin · OXORIO · 19 Jan 2024Acknowledged

The report gives no description here.

Open the report
MediumValidation of _totalDebtCeiling in BookKeeperFathom Stablecoin · OXORIO · 19 Jan 2024Acknowledged

The report gives no description here.

Open the report
MediumModifier onlyOwnerOrGov creates a complex confirmation structure in case of Governance calls in the MultiSigWalletFathom DAO · OXORIO · 18 Jan 2023Acknowledged

The report gives no description here.

Open the report
MediumMultiple streams can be active at the same time with the same parameters in StakingHandler.solFathom DAO · OXORIO · 18 Jan 2023Acknowledged

The report gives no description here.

Open the report
MediumThere is no check for gas consumption in GovernorFathom DAO · OXORIO · 18 Jan 2023Acknowledged

The report gives no description here.

Open the report
MediumThere is no limit for the amount of schedules on streams in StakingHandlersFathom DAO · OXORIO · 18 Jan 2023Acknowledged

The report gives no description here.

Open the report
MediumThere is no limit on the maximum number of active streams in the StakingHandlers contractFathom DAO · OXORIO · 18 Jan 2023Acknowledged

The report gives no description here.

Open the report
LowCheck is not performed prior to sending funds in FathomProxyWalletOwnerFathom Stablecoin · OXORIO · 19 Jan 2024Acknowledged

The report gives no description here.

Open the report
LowGas consumption limitations for integrators in FathomStablecoinProxyActionsFathom Stablecoin · OXORIO · 19 Jan 2024Acknowledged

The report gives no description here.

Open the report
Show 10 more
LowImpossible to withdraw partial amountFathom Stablecoin · OXORIO · 19 Jan 2024Acknowledged

The report gives no description here.

Open the report
LowTransfer amount validation in FathomProxyWalletOwnerUpgradeableFathom Stablecoin · OXORIO · 19 Jan 2024Acknowledged

The report gives no description here.

Open the report
LowTypo in FathomProxyWalletOwnerFathom Stablecoin · OXORIO · 19 Jan 2024Acknowledged

The report gives no description here.

Open the report
LowUse of outdated librariesFathom Stablecoin · OXORIO · 19 Jan 2024Acknowledged

The report gives no description here.

Open the report
LowValidation is redundant in FathomProxyWalletOwner, FathomProxyWalletOwnerUpgradeableFathom Stablecoin · OXORIO · 19 Jan 2024Acknowledged

The report gives no description here.

Open the report
LowIt is not possible to withdraw tokens that were sent by mistakeFathom DAO · OXORIO · 18 Jan 2023Acknowledged

The report gives no description here.

Open the report
LowRevert message strings are too longFathom DAO · OXORIO · 18 Jan 2023Acknowledged

The report gives no description here.

Open the report
LowStream manager, treasury manager and admin represent the same account in StakingHandlersFathom DAO · OXORIO · 18 Jan 2023Acknowledged

The report gives no description here.

Open the report
LowThe Governor and TimeLockController do not support the ERC721 and ERC1155 tokensFathom DAO · OXORIO · 18 Jan 2023Acknowledged

The report gives no description here.

Open the report
LowUnnecessary ' in a RewardsLibrary commentFathom DAO · OXORIO · 18 Jan 2023Acknowledged

The report gives no description here.

Open the report
Show 1 more
LowUnnecessary reads from storageFathom DAO · OXORIO · 18 Jan 2023Acknowledged

The report gives no description here.

Open the report

Contracts

No deployed address is recorded for these audits.

The reports name a repository or files. Open a report to see its scope.

The repositories and files the reports name

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
<div
data-tb-project-widget
data-tb-project-slug="fathom"
></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us