Audit report published Dec 2025. Fuel · Sway.
| Severity | Count |
|---|---|
| Critical | 3 |
| High | 1 |
| Low | 2 |
| Informational | 3 |
| Total | 9 |
Safe Edges reviewed Axios's isolated lending markets on Fuel, written in Sway, in December 2025. Nine issues were identified: three Critical, one High, two Low and three Informational. The Critical issues covered loans being filled without validating the loan type, liquidations that handed the lender all remaining collateral, and a path to drain user funds through the fill functions. Axios fixed seven issues; one Informational issue was acknowledged and one remained unresolved.
C-01 Missing Loan-Type Validation Allows Unauthorized Loan Filling and Fund Locking — ResolvedC-02 Liquidation Transfers Entire Remaining Collateral to Lender, Allowing Value Extraction Beyond Outstanding Debt — ResolvedC-03 Potential Draining of User Funds via fill_lender_request and fill_loan_request — ResolvedH-01 Lack of Collateralization Threshold Validation During Loan Activation Enables Immediate Liquidation — ResolvedL-01 Excess Oracle Update Fee Is Not Refunded in pay_and_update_price_feeds — ResolvedL-02 Missing Validation When Updating protocol_config — ResolvedI-01 Borrowers Cannot Add Collateral to Avoid Liquidation During Market Volatility — AcknowledgedI-02 liquidation_flag_internal Is Never Toggled, Making It Redundant — OpenI-03 Unchecked unwrap() on SRC20::decimals() in check_can_liquidate_based_on_price_ratio_change — ResolvedSend the repository and a commit hash through the contact form, message @bugtester25 on Telegram, or book a 30-minute scoping call. 200+ protocols audited · $4B+ secured · 0 hacks post-audit. Prefer email? info@safeedges.in.