M0 security record
As of 28 Oct 2026, M0 has 9 audit reports by 3 security firms on Trustblock; the latest is by Guardian Audits, dated 8 Jun 2026. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits9
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| M0 Liquidity Delivery Updates | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| M0 PYUSDX Review Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| M0 Liquidity Delivery Review Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 3 critical findings, fixed | Open · GitHub |
| M0 M Extensions Review | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| M Extensions Smart Contracts | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| M0 MUSD Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| M0 M Portal Lite Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| M0 M Extensions | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| M^0 Audit Report | Security firm: Cyfrin | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
Findings96
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 3 |
| High | 0 | 0 | 7 |
| Medium | 0 | 5 | 17 |
| Low | 0 | 36 | 28 |
MediumStuck Orders During Orderbook UpgradesM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Acknowledged
The report gives no description here.
Open the reportMediumTrusted Routers Cannot Execute ActionsM0 M Extensions Review · Guardian Audits · 15 Dec 2025Acknowledged
The report gives no description here.
Open the reportMediumHappy Path: Normal Users Would Receive M TokensM0 M Portal Lite Report · Guardian Audits · 15 Aug 2025Acknowledged
The report gives no description here.
Open the reportMediumMEarnerManager: Old Fee Recipient Address Not ResetM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportMediumMYieldFee : Extension May Drift, Causing Insolvency RiskM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowCapital-efficient Bridge DoSM0 PYUSDX Review Report · Guardian Audits · 24 May 2026Acknowledged
The report gives no description here.
Open the reportLowDelegate ClearanceM0 PYUSDX Review Report · Guardian Audits · 24 May 2026Acknowledged
The report gives no description here.
Open the reportLowFee Lost On Freeze DespiteM0 PYUSDX Review Report · Guardian Audits · 24 May 2026Acknowledged
The report gives no description here.
Open the reportLowPortal IncompatibleM0 PYUSDX Review Report · Guardian Audits · 24 May 2026Acknowledged
The report gives no description here.
Open the reportLowreplaceAsset() AndM0 PYUSDX Review Report · Guardian Audits · 24 May 2026Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowWormhole Routes Have NoM0 PYUSDX Review Report · Guardian Audits · 24 May 2026Acknowledged
The report gives no description here.
Open the reportLowIncorrect msgSender() When Tokens Are ReceivedM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Acknowledged
The report gives no description here.
Open the reportLowOrderbooks Should Have Minimum Fill AmountM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Acknowledged
The report gives no description here.
Open the reportLowOther Programs Can't CPI SendFillReportM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Acknowledged
The report gives no description here.
Open the reportLowRisk Of Broken Accounting After Disabling PortalM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Acknowledged
The report gives no description here.
Open the reportLowSender Cancellation For Cross-Chain OrdersM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Acknowledged
The report gives no description here.
Open the reportLowUsers Can Receive Native M TokenM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Acknowledged
The report gives no description here.
Open the reportLowMissing _beforeApprove OverwriteM0 M Extensions Review · Guardian Audits · 15 Dec 2025Acknowledged
The report gives no description here.
Open the reportLowNo Extension ValidationM0 M Extensions Review · Guardian Audits · 15 Dec 2025Acknowledged
The report gives no description here.
Open the reportLowError Path : Normal User May Receive M TokensM0 M Portal Lite Report · Guardian Audits · 15 Aug 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowBlacklisted Tokens Permanently LockedM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowBlacklisted Users Accrue YieldM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowConsider Using UniversalRouter For SwapsM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowDesign For L2 Oracle Sequencer ResilienceM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowEntire Balance Swaps Between Extensions FailM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowExcess Yield Can't Be ClaimedM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowIMExtension Claim FunctionM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowIncompatibility Of M ExtensionsM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowMEarnerManager: Yield Fee Rounds Against The ProtocolM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowMissing Fee Recipient Check In BlacklistM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowMSpokeYieldFee: Spoke Rate UpdateM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowMSpokeYieldFee: Stepwise JumpsM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowMYieldFee: Accruing Yield When Earning StopsM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowRace Condition On Access Control ListM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowRounding Creates Insolvent ScenariosM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowStale balanceOf DoSM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowSwap Facility Blocks ActionsM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowToken Path Validation BypassedM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowUnbacked Extension Balance Due To RoundingM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportLowUsers Could Own M TokensM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportShow 1 more
LowWhitelist Check Limits CompatibilityM0 M Extensions · Guardian Audits · 5 Aug 2025Acknowledged
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="m0-foundation"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us