Audits
xSuite
Security Audits
Hatom
Smart Contracts
14 audits | 179 issues fixed | Last audited on Jan 3, 2025
USH Isolated Lending
Contract for borrowing USH with no borrowing interests and with a “redemption” mechanism.
Audit
Report
PDF
Date
Jan 3, 2025
Code Hash
hwDcjGa…wk75ds=
Inherent risks
5 inherent risks:
  • 1 USH minted by an USH isolated lending module might be backed by less than $1 worth of collateral.
  • The solvency of a user might be incorrectly assessed, possibly leading to bad debt or to the liquidations of solvent users.
  • Even if a user is solvent, his collateral might be seized by an external account who repays the user’s debt.
  • Users who deposit liquid staking tokens or HTokens as collateral stop earning interests from these tokens.
  • Users might not be able to withdraw collateral at all or to withdraw collateral in the deposited form.
All details are available in the report.
Issues
0 issue remaining (41 reported)
Severity
Reported
Remaining
Critical
5
0
Major
6
0
Medium
18
0
Minor
12
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Addresses of deployment
erd1qqqqqq…ssulpam
erd1qqqqqq…sqtghs5
USH Minter
Contract for minting USH.
Audit
Report
Date
Jan 3, 2025
Code Hash
V+VGv63…MPXsrA=
Inherent risks
1 inherent risk:
  • 1 USH might not be backed by assets with value superior to 1 dollar.
All details are available in the report.
Issues
0 issue remaining (3 reported)
Severity
Reported
Remaining
Critical
0
0
Major
0
0
Medium
1
0
Minor
2
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
erd1qqqqqq…saw9vkl
TAO Lendegate
Contract for entering and exiting the liquid staking money market from wTAO.
Audit
Report
Date
Mar 21, 2024
Code Hash
vclAFRW…mKzGqs=
Inherent risks
0 inherent risk
Issues
0 issue remaining (1 reported)
Severity
Reported
Remaining
Critical
0
0
Major
0
0
Medium
1
0
Minor
0
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
erd1qqqqqq…sy30hfx
TAO Liquid Staking
Contract for tokenizing staked TAO and auto-compounding rewards.
Audit
Report
Date
Mar 21, 2024
Code Hash
lkhhzqw…+905bM=
Inherent risks
2 inherent risks:
  • Users might earn less rewards than they expect.
  • Users might not be able to stake their wTAO.
All details are available in the report.
Issues
0 issue remaining (6 reported)
Severity
Reported
Remaining
Critical
0
0
Major
1
0
Medium
3
0
Minor
2
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
erd1qqqqqq…sfecn6q
Wrapped TAO
Contract for bridging TAO between Bittensor and MultiversX blockchains.
Audit
Report
Date
Mar 21, 2024
Code Hash
hYNC54p…tXYCvQ=
Inherent risks
2 inherent risks:
  • Users might not receive the funds they tried to bridge.
  • Users might not be able to get back 1 TAO per 1 wTAO.
All details are available in the report.
Issues
1 issue remaining (7 reported)
Severity
Reported
Remaining
Critical
0
0
Major
2
0
Medium
2
0
Minor
3
1
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
erd1qqqqqq…sxjzjdh
Oracle (2)
Contract estimating the price of various tokens used in lending borrowing markets.
Audit
Report
Date
Mar 21, 2024
Code Hash
94xophd…KtpXSg=
Inherent risks
1 inherent risk:
  • The prices provided by the oracle might not be accurate.
All details are available in the report.
Issues
0 issue remaining (2 reported)
Severity
Reported
Remaining
Critical
0
0
Major
0
0
Medium
1
0
Minor
1
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
erd1qqqqqq…s975ms4
Booster
Contract for staking HTM and boosting your supply rewards.
Audit
Report
Date
Nov 26, 2023
Code Hash
ld/8dXD…BDppBU=
Inherent risks
3 inherent risks:
  • Users may not be able to claim rewards as HTM if they claim too late.
  • Users may lose unclaimed rewards over time while they have not claimed them.
  • Users might earn less rewards than they expect.
All details are available in the report.
Issues
0 issue remaining (20 reported)
Severity
Reported
Remaining
Critical
1
0
Major
4
0
Medium
9
0
Minor
6
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
erd1qqqqqq…stvn7xd
Controller (2)
Contract coordinating the collaterals and borrows of each user across all money markets.
Audit
Report
Date
Nov 24, 2023
Code Hash
+u9DWyM…2oOsCQ=
Inherent risks
1 inherent risk:
  • Users may not be able to claim rewards as HTM if they claim too late.
All details are available in the report.
Issues
0 issue remaining (18 reported)
Severity
Reported
Remaining
Critical
0
0
Major
2
0
Medium
10
0
Minor
6
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
erd1qqqqqq…sqdk6hr
Money Market
Contract allowing users to lend and borrow a specific token.
Audit
Report
Date
Aug 3, 2023
Code Hash
4lj3QzT…MGG0OQ=
Inherent risks
Not specified
Issues
1 issue remaining (11 reported)
Severity
Reported
Remaining
Critical
0
0
Major
2
0
Medium
1
0
Minor
8
1
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Addresses of deployment
erd1qqqqqq…s5jleq3
erd1qqqqqq…s5q550k
erd1qqqqqq…sfcg5gy
erd1qqqqqq…sypgmrs
erd1qqqqqq…s84aldu
erd1qqqqqq…sr9d72p
erd1qqqqqq…stg8pjr
erd1qqqqqq…sspxpxu
erd1qqqqqq…svevje0
erd1qqqqqq…sgcqs00
erd1qqqqqq…sllmln6
erd1qqqqqq…sswj939
Controller
Contract coordinating the collaterals and borrows of each user across all money markets.
Audit
Report
Date
Aug 3, 2023
Code Hash
mZ1BIzj…MTUujo=
Inherent risks
Not specified
Issues
0 issue remaining (14 reported)
Severity
Reported
Remaining
Critical
0
0
Major
1
0
Medium
9
0
Minor
4
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
Oracle
Contract estimating the price of various tokens used in lending borrowing markets.
Audit
Report
Date
Aug 3, 2023
Code Hash
l1LUmto…bv+YqY=
Inherent risks
1 inherent risk:
  • The prices provided by the oracle might not be accurate.
All details are available in the report.
Issues
0 issue remaining (18 reported)
Severity
Reported
Remaining
Critical
0
0
Major
1
0
Medium
9
0
Minor
8
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
No address of deployment associated to this smart contract.
Interest Rate Model
Contract for calculating the interest rate of a lending borrowing market.
Audit
Report
Date
Aug 3, 2023
Code Hash
zvPftDZ…TULMe4=
Inherent risks
Not specified
Issues
0 issue remaining (3 reported)
Severity
Reported
Remaining
Critical
0
0
Major
0
0
Medium
0
0
Minor
3
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Addresses of deployment
erd1qqqqqq…sp70q9l
erd1qqqqqq…stnpxkm
erd1qqqqqq…sr22sjj
erd1qqqqqq…sz44z2m
erd1qqqqqq…sh8stul
erd1qqqqqq…sltzyx4
erd1qqqqqq…s2eqvny
erd1qqqqqq…sqmckdt
erd1qqqqqq…sg9dqav
erd1qqqqqq…spet2zl
erd1qqqqqq…sszkxv7
erd1qqqqqq…sm302xz
Lendegate
Contract for entering and exiting the liquid staking money market from EGLD.
Audit
Report
Date
Aug 3, 2023
Code Hash
NyyrqHD…tI7iQo=
Inherent risks
Not specified
Issues
0 issue remaining (5 reported)
Severity
Reported
Remaining
Critical
1
0
Major
0
0
Medium
3
0
Minor
1
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
erd1qqqqqq…s7dcj4g
Liquid Staking
Contract for tokenizing staked EGLD and auto-compounding rewards. Selects staking provider algorithmically.
Audit
Report
Date
Jul 15, 2023
Code Hash
65tDL1y…gyjCH0=
Inherent risks
1 inherent risk:
  • Users might make smaller profits than if they delegated directly to the provider of their choice.
All details are available in the report.
Issues
0 issue remaining (32 reported)
Severity
Reported
Remaining
Critical
4
0
Major
12
0
Medium
10
0
Minor
6
0
Disclaimer
The report makes no statements or warranties regarding the security of the code, the information herein or its usage. It does not constitute legal or investment advice. Authors shall not be liable for any acts or omissions based on the information contained herein.
Address of deployment
erd1qqqqqq…slvrf4e
Disclaimer