Audits
This page maps published security work to the Origin products and components that use the reviewed code. It includes direct product reviews as well as relevant evidence from shared implementations.
Every report remains limited to its stated scope, version, date, and assumptions. Review the report itself and compare it with the current deployed code and configuration before relying on it.
Shared code map
OUSD.sol rebasing-token core
OUSD · OETH · superOETHb
OETH and Super OETH inherit the OUSD token implementation. Product contracts mainly specialize metadata and initialization.
VaultAdmin → VaultCore → VaultStorage
OUSD · OETH · superOETHb
The products share the core vault accounting, minting, redemption, rebase, strategy-management, and withdrawal-queue architecture.
WOETH ERC-4626 wrapper
wOUSD · wOETH · wsuperOETHb
The wrappers share conversion, deposit, and redemption accounting. Product wrappers primarily change names and symbols.
Curve AMO lineage
OETH Curve AMO · OUSD Curve AMO · superOETHb Curve AMO
The OETH-audited implementation became the ancestor of later OUSD and Base variants. Their product-specific changes required a separate applicability check.
Algebra stable-swap AMO core
Hydrex and related Algebra AMO implementations
The audited SwapX implementation was later extracted into a reusable stable-swap strategy core. Protocol-specific adapters were added separately.
AbstractARM
Lido ARM · Origin ARM · Ethena ARM · MultiAsset ARM
ARM products share core swap, LP-share, fee, withdrawal-queue, accounting, and market-allocation logic.
OETH
OETH token
• Shared: Certora — Formal Verification — Dec 2024 • Shared: OpenZeppelin — OUSD Yield Delegation — Dec 2024 • Direct/shared: Narya — OETH — May 2023 • Shared: OpenZeppelin — OUSD — Oct 2021 • Shared: Trail of Bits — OUSD — Dec 2020 • Shared: Solidified — OUSD — Dec 2020
OETH inherits the OUSD rebasing and accounting implementation. Narya directly exercised the OETH system.
OETH Vault
• Shared: Sigma Prime — OUSD Upgrade — Feb 2026 • Direct/shared: OpenZeppelin — wOETH and Vault — Apr 2025 • Direct/shared: OpenZeppelin — Withdrawal Queue — Aug 2024 • Direct/shared: Perimeter — OETH Vault Fuzzing — Mar 2024 • Direct/shared: Narya — OETH — May 2023 • Direct/shared: OpenZeppelin — OETH Integration — May 2023
The OETH Vault uses the shared vault core. Reports cover different versions and features rather than one permanent deployment.
wOETH
• Direct/shared: OpenZeppelin — wOETH and Vault — Apr 2025 • Direct/shared: Perimeter — wOETH Fuzzing — Apr 2025
Direct reviews of the wrapper implementation now shared with other Origin wrappers.
Curve AMO / Convex ETH Meta Strategy
The reviewed OETH strategy became the ancestor of the OETH, OUSD, and Base Curve AMO family.
Generalized ERC-4626 Strategy
• Direct: OpenZeppelin — OETH Integration — May 2023 • Direct: Narya — OETH — May 2023
Explicitly reviewed for OETH.
Compounding Staking Strategy
• Direct: Nethermind — Oct 2025 • Direct: OpenZeppelin — Sep 2025 • Direct: Sigma Prime — Sep 2025
Three independent reviews of the same strategy family.
SSV Native Staking
• Narrow follow-up: Sigma Prime — Validator Consolidations — Mar 2026 • Direct: OpenZeppelin — SSV Native Staking — Jun 2024
The 2024 report covered the strategy directly. The 2026 report covered consolidation and migration interactions, not the complete strategy.
Vanilla Compounding Staking Strategy
• Direct: Sigma Prime — Jun 2026 • Lineage: the three 2025 Compounding Staking reports above
The 2026 report reviewed the extracted implementation directly. Earlier reports cover its strategy lineage and shared beacon-proof and accounting design.
Mainnet governance
OETH reuses the Origin governance model and related trust assumptions.
OUSD
OUSD token
• Direct: Certora — Formal Verification — Dec 2024 • Direct: OpenZeppelin — Yield Delegation — Dec 2024 • Shared: Narya — OETH — May 2023 • Direct: OpenZeppelin — OUSD — Oct 2021 • Direct: Trail of Bits — OUSD — Dec 2020
• Direct: Solidified — OUSD — Dec 2020
OUSD is the base token implementation. The OETH engagement also exercised this inherited code through OETH.
OUSD Vault
• Direct: Sigma Prime — OUSD Upgrade — Feb 2026
• Shared: OpenZeppelin — wOETH and Vault — Apr 2025
• Shared: OpenZeppelin — OETH Withdrawal Queue — Aug 2024
• Shared: Perimeter — OETH Vault Fuzzing — Mar 2024
• Direct: OpenZeppelin — Dripper and Uniswap — Apr 2023
• Direct: the 2021 and 2020 OUSD reports listed above
OUSD and the OETH family use the same vault core. OETH-scoped queue, fuzzing, and vault reviews provide evidence for that shared implementation.
wOUSD
• Shared/current base: OpenZeppelin — wOETH — Apr 2025
• Shared/current base: Perimeter — wOETH Fuzzing — Apr 2025
• Direct: Solidified — OGV and wOUSD — May 2022
The 2022 report reviewed the former implementation. Current wOUSD inherits the later audited WOETH wrapper core.
Governance
Direct review of the Origin Dollar governance contracts.
Curve AMO
• Lineage: OpenZeppelin — OETH Integration — May 2023
The OUSD implementation was adapted from the audited OETH AMO lineage. Later OUSD-specific changes are not covered automatically.
Cross-chain strategy v1 and vault simplification
• Direct: Sigma Prime — OUSD Upgrade — Feb 2026
Direct review of the shared-vault simplification and OUSD cross-chain and CCTP components in scope.
Uniswap V3 Strategy
Direct review of the strategy and supporting vault changes.
Dripper / Harvester
• Shared: Narya — OETH — May 2023
• Direct: OpenZeppelin — Dripper and Uniswap — Apr 2023
• Direct: Solidified — OGV and wOUSD — May 2022
Shared OUSD/OETH infrastructure.
superOETHb
superOETHb token
• Shared: Certora — Formal Verification — Dec 2024
• Shared: OpenZeppelin — OUSD Yield Delegation — Dec 2024
• Shared: Narya — OETH — May 2023
• Shared: OpenZeppelin — OUSD — Oct 2021
• Shared: Trail of Bits — OUSD — Dec 2020
• Shared: Solidified — OUSD — Dec 2020
superOETHb inherits the OUSD token implementation. Base-specific administration and configuration remain separate.
superOETHb Vault
• Direct/shared: Sigma Prime — OUSD Upgrade — Feb 2026
• Shared: the wOETH/Vault, Withdrawal Queue, OETH Vault Fuzzing, Narya, and OETH Integration reports listed above
superOETHb uses the same vault core as OUSD and OETH.
wsuperOETHb
• Shared: OpenZeppelin — wOETH — Apr 2025
• Shared: Perimeter — wOETH Fuzzing — Apr 2025
wsuperOETHb inherits the audited WOETH wrapper implementation.
Base Curve AMO
• Lineage: OpenZeppelin — OETH Integration — May 2023
Adapted from the audited OETH Curve AMO lineage. The Base integration came later.
Hydrex AMO
• Lineage: OpenZeppelin — SwapX AMO — Apr 2025
Uses the stable-swap core extracted from the audited implementation. Hydrex-specific integration code was added separately.
Bridged wOETH and cross-chain strategy v1
• Direct/shared: Sigma Prime — OUSD Upgrade — Feb 2026
The report scoped BridgedWOETHStrategy and related shared cross-chain changes.
ARM Vaults
Abstract ARM core
• Direct/shared: yAudit — ARM Upgrade — Sep 2026
• Direct/shared: yAudit — ARM Upgrade — May 2026
• Direct/shared: yAudit — ARM — Dec 2025
• Direct/shared: OpenZeppelin — Origin ARM — Jun 2025
• Direct/shared: OpenZeppelin — Lido ARM — Nov 2024
All ARM products inherit the shared accounting, swap, LP-share, fee, withdrawal-queue, and market-allocation core.
Lido ARM
• Direct: yAudit May 2026 and yAudit Dec 2025
• Shared: OpenZeppelin Jun 2025
• Direct: OpenZeppelin Nov 2024
Lido-specific withdrawal-queue behavior and the shared core were reviewed across these engagements.
Origin ARM
• Direct: yAudit May 2026
• Shared: yAudit Dec 2025
• Direct: OpenZeppelin Jun 2025
• Shared: OpenZeppelin Nov 2024
OriginARM is parameterized for its asset pair and inherits AbstractARM.
Ethena ARM
• Direct: yAudit May 2026
• Shared: yAudit Dec 2025 and both OpenZeppelin ARM reports
The Ethena-specific implementation was included in the May 2026 scope.
MultiAsset ARM
• Direct/shared: yAudit — ARM Upgrade — Sep 2026 • Lineage: yAudit May 2026 • Shared: both OpenZeppelin ARM reports
Built from the audited ARM lineage but materially extended for multi-asset and mixed-decimal support. No direct published report was identified for the full implementation.
Asset adapters
• Direct/shared: yAudit — ARM Upgrade — Sep 2026 • Direct: yAudit — ARM Upgrade — May 2026
Origin, Lido, EtherFi, Ethena, and wrapped-asset adapters were scoped. Later adapters require separate review.
Lending-market wrappers
• Direct: yAudit — ARM — Dec 2025
• Direct: OpenZeppelin — Origin ARM — Jun 2025
The Morpho wrapper was included in yAudit; SiloMarket was included in OpenZeppelin.
CapManager
• Direct: yAudit May 2026 and yAudit Dec 2025
Directly reviewed in both engagements.
OGN and xOGN
OGV to OGN migration and xOGN
• Direct: OpenZeppelin — OGV/OGN Merge — May 2024
Direct migration and staking/governance review.
OGV token and governance
• Direct: Solidified — OGV and wOUSD — May 2022
Multi-scope report covering OGV and related components.
OGN staking and compensation claims
• Direct: Solidified — OGN Staking — Dec 2020
Direct review of the contracts in scope at that time.
Other security reports
Formal verification and fuzzing
These reports evaluate defined properties or explore a generated state and input space. They are not full-system audit certificates.
External risk assessments
These assessments examine collateral, liquidity, governance, or integration risk. They are not code audits.
Dependency evidence
Origin products rely on external assets, protocols, validators, oracles, bridges, chains, and liquidity venues. Reports published by those dependencies can inform an assessment, but their assurance does not transfer to Origin's adapter, accounting, configuration, oracle use, or containment paths.
Complete report archive
The Origin security repository contains the full archive of published reports. Repository presence alone does not establish current coverage: each report must be matched to the current code, deployment, configuration, dependencies, and remediation status.
Last updated