Ostium security record
As of 21 Oct 2026, Ostium has 5 audit reports by 2 security firms on Trustblock; the latest is by Pashov Audit Group, dated 10 Sep 2025. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.
Audits5
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Ostium security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Ostium security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Ostium security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Ostium security review | Security firm: Pashov Audit Group | Date: | Scope: Not recorded (see the report) | No open critical findings | Open · GitHub |
| Ostium security assessment | Security firm: Zellic | Date: | Scope: Not recorded (see the report) | 2 critical findings, fixed | Open · GitHub |
Findings51
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 2 |
| High | 0 | 1 | 3 |
| Medium | 0 | 3 | 13 |
| Low | 0 | 12 | 17 |
CriticalOrder ID reuse due to multiple PriceUpkeepsOstium security assessment · Zellic · 22 Feb 2024Fixed
The report gives no description here.
Open the reportCriticalTraders can increase collateral without paying more tokensOstium security assessment · Zellic · 22 Feb 2024Fixed
The report gives no description here.
Open the reportHighUndervalued funding fee when accFundingRate is negativeOstium security review · Pashov Audit Group · 28 Jan 2025Fixed
The report gives no description here.
Open the reportHighIncorrect funding-rate calculationOstium security assessment · Zellic · 22 Feb 2024Fixed
The report gives no description here.
Open the reportHighTotal open PNL improperly adjusted at zero priceOstium security assessment · Zellic · 22 Feb 2024Fixed
The report gives no description here.
Open the reportMediumInflated trade notional in price impact calculationsOstium security review · Pashov Audit Group · 10 Sep 2025Fixed
The report gives no description here.
Open the reportMediumAdversary blocks volume decay when dt nears max_dtOstium security review · Pashov Audit Group · 26 Aug 2025Fixed
The report gives no description here.
Open the reportMediumPrice impact miscalculation on partial closuresOstium security review · Pashov Audit Group · 26 Aug 2025Fixed
The report gives no description here.
Open the reportMediumPrice impact overcharges using final instead of delta imbalanceOstium security review · Pashov Audit Group · 26 Aug 2025Fixed
The report gives no description here.
Open the reportMediumWrong collateral refund in liquidation when liqPrice == priceAfterImpactOstium security review · Pashov Audit Group · 7 Apr 2025Fixed
The report gives no description here.
Open the reportShow 10 more
MediumThe correctTp() returns overinflated valuesOstium security review · Pashov Audit Group · 28 Jan 2025Fixed
The report gives no description here.
Open the reportMediumupdateTp not validating and correcting the TPOstium security review · Pashov Audit Group · 28 Jan 2025Fixed
The report gives no description here.
Open the reportMediumUsers can prevent oracle fee chargingOstium security review · Pashov Audit Group · 28 Jan 2025Fixed
The report gives no description here.
Open the reportMediumIncorrect funding-rate calculation due to roundingOstium security assessment · Zellic · 22 Feb 2024Fixed
The report gives no description here.
Open the reportMediumPremium price feeds are not used for premium feed pairsOstium security assessment · Zellic · 22 Feb 2024Fixed
The report gives no description here.
Open the reportMediumThe maxAllowedCollateral check could be bypassed using topUpCollateralOstium security assessment · Zellic · 22 Feb 2024Fixed
The report gives no description here.
Open the reportMediumThe utilizationFee is divided by an extra PRECISION_6Ostium security assessment · Zellic · 22 Feb 2024Fixed
The report gives no description here.
Open the reportMediumThe value of groupsCollaterals could exceed groupMaxCollateralOstium security assessment · Zellic · 22 Feb 2024Fixed
The report gives no description here.
Open the reportLowgetTradeRolloverFeePure() returns 1 not 0 when end is less than or equal to accOstium security review · Pashov Audit Group · 10 Sep 2025Fixed
The report gives no description here.
Open the reportLowIncorrect assignment of lastUpdateBlock in migrateRolloverFeesV2()Ostium security review · Pashov Audit Group · 10 Sep 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowIncorrect lastLongPure validationOstium security review · Pashov Audit Group · 10 Sep 2025Fixed
The report gives no description here.
Open the reportLowpairMinLevPos can be bypassedOstium security review · Pashov Audit Group · 10 Sep 2025Fixed
The report gives no description here.
Open the reportLowTrades fail as registerTrade() underflows from builderFeeOstium security review · Pashov Audit Group · 10 Sep 2025Fixed
The report gives no description here.
Open the reportLowUnderflow risk in unregisterTrade() when rollover fees equals collateralOstium security review · Pashov Audit Group · 10 Sep 2025Fixed
The report gives no description here.
Open the reportLowInsufficient collateral verification for oracle feesOstium security review · Pashov Audit Group · 26 Aug 2025Fixed
The report gives no description here.
Open the reportLowLiquidation on equality in getHandleRemoveCollateralCancelReason()Ostium security review · Pashov Audit Group · 26 Aug 2025Fixed
The report gives no description here.
Open the reportLowInconsistent validation of liqMarginThresholdP and maxNegativePnlOnOpenPOstium security review · Pashov Audit Group · 7 Apr 2025Fixed
The report gives no description here.
Open the reportLowmaxLeverage can be set lower than minLeverage overnightOstium security review · Pashov Audit Group · 7 Apr 2025Fixed
The report gives no description here.
Open the reportLowAn invariant can be brokenOstium security review · Pashov Audit Group · 28 Jan 2025Fixed
The report gives no description here.
Open the reportLowMissing validation for MAX_TRADE_SIZE_REFOstium security review · Pashov Audit Group · 28 Jan 2025Fixed
The report gives no description here.
Open the reportShow 5 more
LowNew PairFundingFeesV2 parameters are not validatedOstium security review · Pashov Audit Group · 28 Jan 2025Fixed
The report gives no description here.
Open the reportLowRemoving listed pair will disallow closing tradesOstium security review · Pashov Audit Group · 28 Jan 2025Fixed
The report gives no description here.
Open the reportLowAny allowance allows unlimited withdrawal changesOstium security assessment · Zellic · 22 Feb 2024Fixed
The report gives no description here.
Open the reportLowMarket-close time-out reissuance can be skippedOstium security assessment · Zellic · 22 Feb 2024Fixed
The report gives no description here.
Open the reportLowUnexecutable trades might be added to tradesToTriggerOstium security assessment · Zellic · 22 Feb 2024Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="ostium"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us