On December 18, 2025, Halborn confirmed via X (formerly Twitter) it has completed its smart contract security audit for Mutuum Finance, a decentralized lending and borrowing protocol currently in its presale phase. Halborn’s report focused on the staking, safety, and reward distribution smart contracts within the Mutuum Finance codebase, and lists an assessment period of November 18–26, 2025, with all reported findings marked as addressed by the development team by December 3, 2025.
According to the published Halborn audit report, the assessment did not identify any critical vulnerabilities within the assessed contracts. One high-severity issue was reported and subsequently fixed, alongside several lower-severity findings and informational notes. Halborn has recommended follow-up reviews after future code changes, consistent with standard security practices for DeFi protocols.
The Halborn audit was limited to a defined subset of the Mutuum Finance codebase, focusing on Solidity smart contracts implementing an Aave-inspired staking and safety mechanism. The scope included staking, safety management, reward distribution, fee collection, related interfaces, and an oracle fallback component.
Third-party dependencies, economic attack scenarios, and any features introduced after remediation commits were explicitly excluded.
Halborn reported a total of six findings:
The high-severity issue related to the initial deposit mechanics of share-based staking pools, where an early depositor could manipulate share pricing in a way that disadvantaged later participants. The issue was remediated by adjusting the minting logic to prevent this behavior.
The remaining low-severity findings addressed edge cases involving parameter bounds, oracle price scaling, reward distribution checks, and staking-related logic. One low-risk design choice was documented as an accepted risk.
Halborn recommended a follow-up audit after material code changes or within six months.
While Mutuum Finance stated on November 20 that Halborn was reviewing its lending and borrowing contracts, the final audit report shows that the completed assessment was limited to staking, safety, reward distribution, and related share-based contracts, with core lending and borrowing execution logic not included in scope.
Mutuum Finance is developing a decentralized lending and borrowing protocol built on blockchain infrastructure, with an initial deployment planned on Ethereum testnet. Outside the scope of the completed Halborn audit, the protocol allows users to supply crypto assets and earn yield generated from borrower interest. Borrowers can access liquidity by posting collateral, with loan-to-value limits and automated liquidations designed to manage risk.
Lender positions are represented through protocol-issued tokens that reflect accrued interest over time, while interest rates adjust dynamically based on pool utilization. The first version of the protocol is expected to support a limited set of assets, including ETH and stablecoins, before expanding functionality in later iterations.
The project is currently running a multi-phase MUTM token presale, with the token intended to support protocol incentives, governance mechanisms, and future ecosystem features. Development milestones include a testnet launch followed by further audits and incremental feature releases.
0 Comments
We're proud to announce that we have successfully completed our smart contract security assessment for @MutuumFinance! 🔐 Mutuum (MUTM) is a decentralized, non-custodial liquidity protocol that enables users to engage as lenders, borrowers, or liquidators.
