# Smart Contract Audits

The integrity of our code is paramount. We've conducted comprehensive audits to identify potential vulnerabilities, carried out by industry experts.

### Mainnet: Smart Contracts Addresses

<table><thead><tr><th width="258">Name</th><th>Contract Address</th></tr></thead><tbody><tr><td>proxyAdminAddress</td><td>0x083F97BabF33D4abC03151B5DEc98170761f4025</td></tr><tr><td>registryAddress</td><td>0x799a139aE56e11F0476aCE2f6118CfcAed9608d2</td></tr><tr><td>vaultAddress</td><td>0x20D419a8e12C45f88fDA7c5760bb6923Cee27F98</td></tr><tr><td>lockedDepositNftAddress</td><td>(deprecated — existing locked deposits only)</td></tr><tr><td>tradingStorageAddress</td><td>0xccd5891083a8acd2074690f65d3024e7d13d66e7</td></tr><tr><td>pairInfosAddress</td><td>0x3890243a8fc091c626ed26c087a028b46bc9d66c</td></tr><tr><td>pairsStorageAddress</td><td>0x260E349F643f12797fDc6f8c9d3df211D5577823</td></tr><tr><td>tradingAddress</td><td>0x6D0bA1f9996DBD8885827e1b2e8f6593e7702411</td></tr><tr><td>tradingCallbacksAddress</td><td>0x7720fC8c8680bF4a1Af99d44c6c265a74e9742a9</td></tr><tr><td>openPnlFeedAddress</td><td>0xE607aC9FF58697c5978AfA1Fc1C5C437a6D1858c</td></tr><tr><td>tradesUpKeepAddress</td><td>0x959Da1452238F71F17f7DA5dbA2e9c04FEf57324</td></tr><tr><td>priceRouterAddress</td><td>0x4B0C3c77D398912491f192d265b237C8d4441AD7</td></tr><tr><td>priceUpKeepAddress</td><td>0x52B2a78E12b09B66C6c8ce291D653D40bAb77f0c</td></tr><tr><td>privatePriceUpKeepAddress</td><td>0xB71ec9eBD8145daCaCF6724363143cb5667A3d36</td></tr><tr><td>verifierAddress</td><td>0xcCF233920e8cc9415ecF503b992881d69b6c47Ad</td></tr></tbody></table>

### Testnet: Smart contract addresses

<table><thead><tr><th width="263.421875">Registry</th><th>0xf86cff7679BA3E99d21255d774088E25FE0ec34a</th></tr></thead><tbody><tr><td>ProxyAdmin</td><td>0xaB5583ebf187b926e48DeB9e9bb13418255c665C</td></tr><tr><td>TimeLockOwner</td><td>0xbc7B65D3Aa1C38B39AC63f131D5245C51b83acbc</td></tr><tr><td>LockedDepositNft</td><td>(deprecated — existing locked deposits only)</td></tr><tr><td>Vault</td><td>0x2fbf52c8769c5da05afee7853b12775461cD04d2</td></tr><tr><td>Trading</td><td>0x2A9B9c988393f46a2537B0ff11E98c2C15a95afe</td></tr><tr><td>TradingStorage</td><td>0x0b9F5243B29938668c9Cfbd7557A389EC7Ef88b8</td></tr><tr><td>PairInfos</td><td>0xEF5D3fC8A4651B32D2DAB967E1D91a67eCfa953E</td></tr><tr><td>PairsStorage</td><td>0x81e252CCF6BB99202220FDc0c5788bBd9e2473D0</td></tr><tr><td>TradingCallbacks</td><td>0x83DC7c5dDeAD58f47230b70e6EF6bc44064BD814</td></tr><tr><td>OpenPnlFeed</td><td>0x27db8B73eC5cbaa17B4e7D3D3F07EBDb2eE3e154</td></tr><tr><td>PriceRouter</td><td>0x30DA14a620c9724C1Bb5d1f04049a29e2413d3aA</td></tr><tr><td>PriceUpKeep</td><td>0x297775475E875025F58789dD46A9E2dcFCB0a1e1</td></tr><tr><td>PrivatePriceUpKeep</td><td>0x5d3Af2Ab23a5F38c548151F507F6dded9979B328</td></tr><tr><td>Verifier</td><td>0x52C8c22BF47657C172e5D7a7FB2C1156916BAc46</td></tr><tr><td>TradesUpKeep</td><td>0x9404A01D0546907e0bDCD0545146cB9781416E4c</td></tr><tr><td>MockUsdc</td><td>0xe73B11Fb1e3eeEe8AF2a23079A4410Fe1B370548</td></tr><tr><td>Gelato forwarder / PairInfosManager</td><td>0xad42c5da19b8d3f8c20847cb5a1a2deb502b5d46</td></tr></tbody></table>

### Zellic

We conducted a first audit with Zellic. Report below.

{% file src="<https://1263702948-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCEDPLHGTrrpP1i2dbe3d%2Fuploads%2FaMgw1k5iR4SvbYWRcs7q%2FOstium%20-%20Zellic%20Audit%20Report%20(1).pdf?alt=media&token=771b25d4-be83-4a49-b1b5-8a9184d2b3f6>" %}

As well as one on Nov 2025.

{% file src="<https://1263702948-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCEDPLHGTrrpP1i2dbe3d%2Fuploads%2F1NAt99nKJ1HesxyWjElF%2FZellic%20Nov%2025.pdf?alt=media&token=3e34f62e-8909-41a7-888a-dda6d6fc481c>" %}

### ThreeSigma

We conducted a second audit with ThreeSigma. Report below.

{% file src="<https://1263702948-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCEDPLHGTrrpP1i2dbe3d%2Fuploads%2FMpYIMzIusmebDMScUlYB%2FOstiumAudit.pdf?alt=media&token=7043d99e-ba05-4ad1-8505-d3cf9e2a6415>" %}

### Pashov

{% file src="<https://1263702948-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCEDPLHGTrrpP1i2dbe3d%2Fuploads%2FG0Of6YAPlrOIPs51aj16%2FOstium-security-review_2025-01-21.pdf?alt=media&token=162c18f6-54fe-4dfe-be56-826ad040fff0>" %}

{% file src="<https://1263702948-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCEDPLHGTrrpP1i2dbe3d%2Fuploads%2F7b08UITTgMLh1ej19d7I%2FOstium-security-review_2025-04-06.pdf?alt=media&token=a61ab4ef-2245-4ec6-b865-e8069d40a332>" %}

{% file src="<https://1263702948-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FCEDPLHGTrrpP1i2dbe3d%2Fuploads%2F342r2xPX6yppDzAfPLVz%2FPashov%20Jan%2026.pdf?alt=media&token=a212135d-79f4-4896-bc90-fb7e88058ea3>" %}
