M0 security record
As of 28 Oct 2026, M0 has 9 audit reports by 3 security firms on Trustblock; the latest is by Guardian Audits, dated 8 Jun 2026. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits9
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| M0 Liquidity Delivery Updates | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| M0 PYUSDX Review Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| M0 Liquidity Delivery Review Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | 3 critical findings, fixed | Open · GitHub |
| M0 M Extensions Review | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| M Extensions Smart Contracts | Security firm: ChainSecurity | Date: | Scope: Files named in the report | No open critical findings | Open · chainsecurity.com |
| M0 MUSD Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| M0 M Portal Lite Report | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| M0 M Extensions | Security firm: Guardian Audits | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| M^0 Audit Report | Security firm: Cyfrin | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
Findings96
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 3 |
| High | 0 | 0 | 7 |
| Medium | 0 | 5 | 17 |
| Low | 0 | 36 | 28 |
CriticalAnyone Can Replay The M0 Transfer Between SpokesM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportCriticalCross Chain Orders Can Be Canceled From SourceM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportCriticalOrderbook Drained Due To Cancelled OrdersM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportHighCrosschain Orders Cannot Be Filled On EVMM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportHighIncorrect Scaling Of Token AmountM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportHighPortals Cannot Send Cancel ReportsM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportHighStuck Funds Due To Non-isolated SpokesM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportHighSVM Payload Is MalformedM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportHighMYieldFee Can Be Forced Into Insolvency if Non EarningM Extensions Smart Contracts · ChainSecurity · 26 Aug 2025Fixed
The report gives no description here.
Open the reportHighMYieldFee : Yield AccrualM0 M Extensions · Guardian Audits · 5 Aug 2025Fixed
The report gives no description here.
Open the reportShow 10 more
MediumCancel Race Condition Reintroduced On SVMM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportMediumDelivery Of Signed Cancellations Can Be GriefedM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportMediumHardcoded Chain ID Vulnerable To ReplayM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportMediumIsolated Spokes Can Receive Tokens From SVMM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportMediumLoss For Solvers Due To A Cancel Race ConditionM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportMediumMerkle Root Updates Cannot Be Send To SVMM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportMediumPortal Initialize Logic Cannot Be ExecutedM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportMediumSVM: M Supply Inflation Due To Missing BurnM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportMediumSVM: Race Condition For Earner Merkle RootsM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportMediumMEarnerManager Can Be Forced Into an Irrecoverable StateM Extensions Smart Contracts · ChainSecurity · 26 Aug 2025Fixed
The report gives no description here.
Open the reportShow 10 more
MediumRemoving MEarnerManager From the Earner List Will Make It InsolventM Extensions Smart Contracts · ChainSecurity · 26 Aug 2025Fixed
The report gives no description here.
Open the reportMediumWrapped $M V1 Is UnsupportedM Extensions Smart Contracts · ChainSecurity · 26 Aug 2025Fixed
The report gives no description here.
Open the reportMediumWrong Remaining Balance in swapOut()M Extensions Smart Contracts · ChainSecurity · 26 Aug 2025Fixed
The report gives no description here.
Open the reportMediumMEarnerManager: Extraction Of Fake Yield Via DeFiM0 M Extensions · Guardian Audits · 5 Aug 2025Fixed
The report gives no description here.
Open the reportMediumWrong Swap Recipient SetM0 M Extensions · Guardian Audits · 5 Aug 2025Fixed
The report gives no description here.
Open the reportMediumCross-chain token transfer from SpokeVault fails due to approval from implementation contract instead of proxyM^0 Audit Report · Cyfrin · 26 Nov 2024Fixed
The report gives no description here.
Open the reportMediumSpokeVault transfers will frequently revert due to Wormhole gas fee fluctuationsM^0 Audit Report · Cyfrin · 26 Nov 2024Fixed
The report gives no description here.
Open the reportLowCancel TYPEHASH diverges from EIP-712M0 Liquidity Delivery Updates · Guardian Audits · 8 Jun 2026Fixed
The report gives no description here.
Open the reportLowIssuerGateway Does NotM0 PYUSDX Review Report · Guardian Audits · 24 May 2026Fixed
The report gives no description here.
Open the reportLowRate Limiters: Dead CodeM0 PYUSDX Review Report · Guardian Audits · 24 May 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowDo Not Reset Finality On Removed SupportM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportLowGasless Order VERSION Is Not VerifiedM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportLowInaccurate Comment Regarding Chain ID DefinitionM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportLowIncorrect Comment _revertIfTokenTransferDisabledM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportLowIndex Should Be Updated During All xChain InteractionsM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportLowLack Of Address(0) Check For Default AdapterM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportLowMissing Check If Default Adapter Is SupportedM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportLowUnscaled Amount Emitted In TokenSentM0 Liquidity Delivery Review Report · Guardian Audits · 30 Jan 2026Fixed
The report gives no description here.
Open the reportLow_replaceAssetWithM and _wrapCalc Can Round To 0M0 M Extensions Review · Guardian Audits · 15 Dec 2025Fixed
The report gives no description here.
Open the reportLowAsset Donations Can Lead To UnderflowM0 M Extensions Review · Guardian Audits · 15 Dec 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowMToken Can Be WrappedM0 M Extensions Review · Guardian Audits · 15 Dec 2025Fixed
The report gives no description here.
Open the reportLowDisable Initializers on ImplementationM Extensions Smart Contracts · ChainSecurity · 26 Aug 2025Fixed
The report gives no description here.
Open the reportLowIncorrect earnerRate() Returned by MYieldFee When Not EarningM Extensions Smart Contracts · ChainSecurity · 26 Aug 2025Fixed
The report gives no description here.
Open the reportLowbaseToken Fetched In Every IterationM0 M Extensions · Guardian Audits · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowContracts Can't Be UpgradedM0 M Extensions · Guardian Audits · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowIncorrect CommentsM0 M Extensions · Guardian Audits · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowIncorrect Return Param NameM0 M Extensions · Guardian Audits · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowInterface feeRate Not Declared As ViewM0 M Extensions · Guardian Audits · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowMEarnerManager: Missing ClaimM0 M Extensions · Guardian Audits · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowMExtension Implementations Can Be InitializedM0 M Extensions · Guardian Audits · 5 Aug 2025Fixed
The report gives no description here.
Open the reportShow 5 more
LowMYieldFee: Claim YieldM0 M Extensions · Guardian Audits · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowMYieldFee: Earning DisabledM0 M Extensions · Guardian Audits · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowMYieldFee:Unnecessary Index UpdateM0 M Extensions · Guardian Audits · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowMYieldOne: Claim YieldM0 M Extensions · Guardian Audits · 5 Aug 2025Fixed
The report gives no description here.
Open the reportLowswapInToken Steals Tokens From UserM0 M Extensions · Guardian Audits · 5 Aug 2025Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="m0-foundation"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us