Audits
Third-party security reviews of DomFi smart contracts, findings summary, and full report download.
Pashov Audit Group — December 2025
DomFi smart contracts were audited by Pashov Audit Group in a time-boxed security review from December 7, 2025 to January 3, 2026, with a fixes review phase through January 27, 2026.
Five researchers — Tejas Warambhe, 0xunforgiven, IvanFitro, 0xAlix2, and ExtraCaterpillar — reviewed the domination-finance/domfi-contracts repository.
Download full report (PDF)
Findings Summary
| Severity | Count | Status |
|---|---|---|
| High | 9 | All resolved |
| Medium | 29 | All resolved |
| Low | 29 | All resolved |
| Total | 67 | All resolved |
Scope
The review covered 20 Solidity contracts including:
- Core trading —
DomfiTrading,DomfiTradingCallbacks,DomfiTradingStorage,TradingCallbacksLib - Vault and LP —
DomfiVault,DomfiLockedDepositNft,DomfiOpenPnl - Oracle pipeline —
DomfiPriceRouter,DomfiPrivatePriceUpKeep,DomfiVerifier,DomfiOracle - Pair configuration —
DomfiPairInfos,DomfiPairsStorage - Automation —
DomfiTradesUpKeep(liquidations, SL/TP execution) - Governance —
DomfiTimelockOwner,DomfiTimelockManager,DomfiRegistry - Utilities —
Delegatable,ChainUtils
Timeline
| Phase | Dates |
|---|---|
| Main audit | December 7 – January 3 |
| Fixes review | January 3 – January 18 |
| Extra audit + fixes review | January 19 – January 27 |