TL;DR: Oregon now mandates testing for both mycotoxins and heavy metals in cannabis products. Unlike microbial failures—where VHP sterilization can recover the batch—mycotoxin and heavy metals failures carry a destruction-only outcome. There is no remediation pathway. Prevention, not recovery, is the only viable strategy. This article explains what causes these failures, how they enter the supply chain, and what a functional prevention program looks like.
Key Takeaways
- Mycotoxin and heavy metals failures in Oregon result in mandatory destruction—remediation is not permitted
- Mycotoxins are secondary metabolites produced by mold species; they persist in plant material even after the mold is eliminated
- Heavy metals enter cannabis through soil, water, fertilizers, and growing media—and cannabis is a known bioaccumulator
- Oregon phased in mycotoxin testing for harvests on or after July 1, 2022, and heavy metals testing for harvests on or after March 1, 2023
- Usable marijuana and finished inhalable products that fail heavy metals cannot be remediated; concentrates may be, with strict limits
- VHP sterilization reduces live mold and yeast load before testing—potentially preventing the mold activity that produces mycotoxins in the first place
- The financial stakes of a non-remediable failure are categorically higher than a microbial failure
Two Failure Categories Where Remediation Doesn't Exist
Oregon's cannabis testing framework distinguishes clearly between failures that can be remediated and failures that cannot. For microbial contamination, processors have options: sterilization remediation, followed by retesting. For mycotoxins and heavy metals, the framework is unambiguous.
Mycotoxin failures: If a batch fails mycotoxin testing, it must be destroyed. There is no retesting pathway. There is no sterilization option. There is no state-permission exception. The product is gone.
Heavy metals failures: Usable marijuana and finished inhalable products that fail heavy metals testing must be destroyed. Concentrates and extracts may be remediable using procedures that reduce heavy metal concentrations below action limits—but that narrow pathway applies only to non-flower products that can be further refined. Flower that fails heavy metals cannot be recovered.
The financial consequences of a non-remediable failure are severe. A failed microbial batch can be sterilized, retested, and sold. A failed mycotoxin or heavy metals batch is a total loss—the value of the entire lot, plus the testing costs, plus the destruction and disposal costs, with no recovery.
This is why prevention is not just preferable—it is the only business-viable approach to mycotoxin and heavy metals compliance.
Understanding Mycotoxins: What They Are and Where They Come From
Mycotoxins are secondary metabolites produced by certain mold species under specific environmental conditions. They are not mold itself—they are chemical compounds that mold produces. This distinction matters enormously for cannabis processors:
Mycotoxins survive sterilization. Heat, chemical treatment, UV irradiation, and even VHP sterilization can kill the mold organism. But the mycotoxin molecules the mold already produced remain in the plant material. Sterilizing a batch that has already accumulated mycotoxin contamination does not remove the mycotoxins—it only kills the mold that produced them. The batch will still fail mycotoxin testing.
This is the fundamental reason why mycotoxin failures cannot be remediated. By the time a batch tests positive for mycotoxins, the chemical contamination is embedded in the product. There is no process that selectively removes mycotoxin molecules from cannabis material at scale.
The Aspergillus Connection
Oregon's testing requirements target aflatoxins and ochratoxin A—the two mycotoxin classes most relevant to cannabis. Both are produced primarily by Aspergillus species.
Aflatoxins (B1, B2, G1, G2) are produced principally by Aspergillus flavus and Aspergillus parasiticus. Aflatoxin B1 is classified as a Group 1 carcinogen by the International Agency for Research on Cancer. It is the most potent naturally occurring carcinogen known, and it is present at detectable concentrations in some cannabis products in uncontrolled growing environments.
Ochratoxin A (OTA) is produced primarily by Aspergillus ochraceus and Aspergillus carbonarius. It accumulates in plant tissue and has nephrotoxic and immunosuppressive properties. Like aflatoxins, it is heat-stable and is not removed by most decontamination processes.
The Aspergillus species that produce these toxins are ubiquitous in soil and ambient air. They are present in virtually every cannabis grow environment at baseline concentrations. Mycotoxin production is triggered not simply by the presence of Aspergillus—it is triggered by specific stress conditions that cause the mold to enter secondary metabolite production mode.
Conditions That Trigger Mycotoxin Production
Mycotoxin production typically occurs when Aspergillus or other toxigenic mold species are exposed to:
- High humidity or water activity — The primary trigger. Aspergillus species begin producing toxins at water activity levels above 0.83–0.87 Aw (species-dependent). Cannabis flower at the edge of moisture limits is in the mycotoxin risk zone.
- Temperature stress — Thermal fluctuations (day/night cycling in outdoor grows, HVAC inconsistency in indoor grows) create metabolic stress that can trigger toxin production.
- Nitrogen-limited conditions — High-stress end-of-cycle periods, when plants are depleted of nutrients, create conditions associated with elevated mycotoxin risk.
- Extended storage — Product held in storage at borderline humidity conditions accumulates mycotoxin risk over time. The mold load may be below testing thresholds at harvest but grow into toxin-producing concentrations over weeks of storage.
- Physical damage — Mechanical damage to plant material during trimming or handling opens wound sites that mold colonizes preferentially.
Understanding Heavy Metals: How They Enter Cannabis
Heavy metals in cannabis are a fundamentally different problem from mycotoxins. They don't grow. They don't respond to environmental controls the way biological contaminants do. They enter the plant through the roots, and once they're in, they stay.
Oregon tests for four heavy metals: arsenic, cadmium, lead, and mercury.
Cannabis as a Bioaccumulator
Cannabis is a well-documented hyperaccumulator of heavy metals. The same properties that make hemp a useful tool for phytoremediation—biologically removing heavy metals from contaminated soil—make cannabis grown in contaminated soil a heavy metals delivery vehicle for consumers.
Cannabis root systems are efficient at extracting metals from soil. Once absorbed, metals are translocated into the plant's vascular system and distributed throughout the plant tissue—including the flower. A field that tested below action thresholds for agricultural use may have localized hot spots that push cannabis flower above cannabis-specific action limits, which are generally stricter than agricultural soil standards.
The Four Entry Points
Soil. Background heavy metals concentrations in agricultural soil vary significantly by geography, geologic substrate, and agricultural history. Soils with natural mineral deposits, soils near historic mining or smelting operations, and soils with a history of certain pesticide applications (some historical pesticides contained lead and arsenic) present elevated risk.
Water. Irrigation water from wells, streams, or municipal sources can carry dissolved metals. The contribution of irrigation water to plant heavy metals load depends on irrigation volume and water source quality. Well water in areas with naturally occurring mineral concentrations can be a meaningful input.
Fertilizers and amendments. Phosphate fertilizers are a well-documented source of cadmium in agricultural settings. Some organic amendments—compost, manure, biosolids—may contain elevated heavy metals concentrations depending on their source. Liquid fertilizer formulations vary significantly in heavy metals content.
Growing media. Coco coir, peat, perlite, and other soilless growing media can contain variable heavy metals concentrations depending on their origin and processing. Media sourced from industrial byproduct streams (certain coco coir sources, for example) may have elevated concentrations that are not disclosed by the supplier.
Equipment. Metal contamination from processing equipment—trimmers, grinders, processing surfaces—is a secondary source of heavy metals contamination in finished product. This is more relevant for concentrates than flower.
Environmental Controls That Reduce Mycotoxin Risk
Priority 1: Water Activity Management
Water activity control is the highest-leverage intervention for mycotoxin prevention. The goal is to keep flower water activity below 0.65 Aw during drying and below 0.60 Aw during storage—well below the threshold where Aspergillus species begin toxin production (0.83–0.87 Aw).
Key practices:
- Use calibrated water activity meters, not moisture percentage, as the drying endpoint indicator
- Monitor water activity at multiple points in the product, not just the surface—dense bud interior retains moisture longer than the outer surface
- Maintain drying room humidity below 55% RH during the initial drying phase
- Use environmental controllers (not just humidistats) that actively respond to humidity fluctuations rather than waiting for threshold breaches
Priority 2: Environmental Monitoring
Aspergillus species can't be eliminated from a grow environment—they're present in outdoor air, soil, and on plant surfaces universally. The goal is to prevent conditions that allow high-level colonization.
- Conduct regular air sampling in grow, drying, and processing spaces using culture-based or PCR-based methods
- Track Aspergillus counts over time to identify seasonal or operational trends
- Investigate and remediate HVAC systems that show elevated counts—mold in ductwork becomes a continuous contamination source
- Maintain negative pressure differential between harvest/drying spaces and clean processing areas
Priority 3: Strain and Substrate Selection
Cultivation practices that reduce physical stress at harvest—selecting cultivars appropriate for the climate and growing method, managing nutrient cycles to avoid late-stage starvation stress, and harvesting before extended wet weather windows—reduce the environmental triggers that activate mycotoxin production.
Priority 4: Storage Conditions
Once product is dried to target water activity, storage conditions must maintain it there. Sealed, humidity-controlled storage with temperature stability reduces the risk that product that passed at harvest will accumulate contamination in storage.
Heavy Metals Upstream Mitigation
Soil and Media Testing
Testing soil before planting—specifically for arsenic, cadmium, lead, and mercury—is the most direct early-warning intervention for heavy metals risk. Commercial agricultural labs perform standard heavy metals panels on soil samples. This is particularly important for:
- New cultivation sites without testing history
- Sites with proximity to historical industrial activity, mining, or roads with historical leaded gasoline vehicle traffic
- Sites with unusual mineral profiles or pH extremes
Similarly, testing growing media before use—especially new or unfamiliar suppliers—can identify metal contamination before it becomes embedded in a product.
Water Source Testing
Annual water quality testing for heavy metals from wells and surface water irrigation sources provides the baseline data needed to assess risk and respond to changes. Municipal water sources should be tested at the point of use, since distribution system infrastructure (older lead pipes in particular) can introduce contamination between the treatment plant and the facility.
Fertilizer and Amendment Auditing
Request Certificates of Analysis from fertilizer suppliers that include heavy metals data. This is standard practice in controlled-environment agriculture and in organic certification programs. Many suppliers offer this data on request; suppliers who cannot or will not provide it represent an unquantified risk.
Pay specific attention to phosphate-based fertilizers (cadmium risk) and any amendment derived from industrial or municipal waste streams (variable metals profiles).
Where VHP Fits in a Prevention-First Workflow
VHP sterilization cannot remove mycotoxins that have already formed—this limitation is fundamental chemistry, not a product deficiency. But VHP has a meaningful role in a prevention-first approach:
Reducing mold load before testing. Cannabis that carries elevated Aspergillus populations but has not yet accumulated mycotoxins to detectable levels represents a product at risk. VHP treatment applied as an in-process control step before testing reduces live mold populations below action limits. This serves two purposes: the product passes microbial testing, and the mold that would have continued producing mycotoxins during storage and distribution is eliminated.
This is not remediation—it is prevention applied at the processing stage. The key condition is that mycotoxin production has not yet occurred at detectable levels. VHP converts a high-mold-load product that is approaching risk into a low-mold-load product that poses no further accumulation risk.
Preventing post-processing contamination. Equipment surfaces, processing rooms, and storage environments can reintroduce Aspergillus to clean product. Regular VHP decontamination of processing environments reduces ambient mold concentrations that would otherwise contact and colonize stored product.
Supporting an integrated prevention program. VHP is one layer in a multi-layer prevention architecture. It complements, rather than replaces, water activity management, environmental monitoring, and substrate sourcing controls. The layers work together: environmental controls reduce Aspergillus populations in the grow space; water activity management prevents conditions that trigger toxin production; VHP reduces mold load on processed product before storage and testing.
Building a Documented Prevention Program
Oregon processors whose batches fail mycotoxin or heavy metals testing cannot remedy the situation—but they can document that they took reasonable preventive steps. That documentation matters for two reasons: it supports the claim that a failure was an isolated event rather than a systemic problem, and it demonstrates to OLCC that the operation has a functional compliance posture.
A documented prevention program should include:
Water activity monitoring records. Logs from calibrated meters showing water activity readings at drying milestones for each batch. These records demonstrate that the drying process was managed to specification.
Environmental monitoring records. Scheduled air and surface sampling results, logged by date and location, showing Aspergillus and total mold counts over time. Trend data is more valuable than point-in-time data—it shows that environmental controls are consistently maintained.
Soil and water testing certificates. Current-year test results for the cultivation site and irrigation water source, confirming heavy metals concentrations are within acceptable ranges.
Fertilizer and amendment COAs. Supplier Certificates of Analysis for all inputs that contact the crop, including heavy metals data.
VHP cycle records. If VHP sterilization is used as an in-process control step, every cycle record documents the treatment conditions and serves as evidence of active contamination management.
Corrective action documentation. Any time an environmental monitor shows elevated readings, or a batch result is unexpected, documenting the investigation and corrective action demonstrates a functioning quality management system.
Frequently Asked Questions
Can a cannabis batch fail for mycotoxins even if it passes for mold?
Yes—and this is a critical point that many processors don't understand. Microbial testing and mycotoxin testing are separate tests measuring different things. A batch can have live Aspergillus counts below the action limit for microbial testing while still having accumulated mycotoxin concentrations above the mycotoxin action limit. The mold produced the toxin, then died or was reduced below the detection threshold—but the toxin it produced remains. This is one reason why prevention (keeping mold loads low throughout the process) is more important than remediation.
If I treat my product with VHP and it kills the mold, will it also remove the mycotoxins?
No. VHP kills biological organisms—bacteria, fungi, spores. It does not chemically degrade mycotoxin molecules. Mycotoxins are small, stable chemical compounds that are not affected by VHP treatment. If mycotoxin-producing mold has been active in a product before VHP treatment, the mycotoxins remain after the treatment. VHP's role is preventing continued mold activity—not removing contamination that has already occurred.
What heavy metals action limits apply to cannabis in Oregon?
Oregon adopted heavy metals action limits through OHA rule. The limits vary by test category (inhalable vs. oral). For usable marijuana intended for inhalation, limits are stricter than for edible products. Current limits should be verified directly with ORELAP or OHA, as they are subject to revision. As of the most recent published rules, limits for inhalable cannabis flower are generally aligned with other states' inhalable product standards.
Does growing indoors in soilless media eliminate heavy metals risk?
It reduces risk from soil-sourced metals significantly, but does not eliminate heavy metals risk. Soilless growing media (coco coir, peat, perlite, rockwool) can contain variable metal concentrations depending on source and processing. Fertilizers and nutrient solutions remain input vectors. Water source quality still matters. Indoor controlled-environment growing is lower-risk than outdoor soil growing, but heavy metals testing and input auditing remain appropriate.
How often should I test soil for heavy metals?
For licensed cannabis cultivation sites, annual soil testing is a prudent baseline. Retesting is appropriate after any change in growing practice that could affect metals loading (new fertilizer inputs, amendments, irrigation source changes) or after any unusual batch results that can't be explained by other factors. New sites should be tested before the first cultivation cycle.
The Prevention Imperative
Oregon's testing mandates for mycotoxins and heavy metals represent a category of compliance risk that is genuinely different from microbial contamination. Microbial failures are recoverable—with validated sterilization, a compliant remediation pathway exists. Mycotoxin and heavy metals failures are terminal. When the test fails, the product is destroyed.
That asymmetry should drive investment decisions at cannabis operations operating in Oregon and in the other states that are following Oregon's trajectory on mandatory testing requirements.
Prevention is not a regulatory nicety. It is the only economically viable strategy for mycotoxin and heavy metals compliance. Environmental controls, substrate auditing, water activity management, and process control infrastructure are not optional for processors who operate in mandatory testing markets. They are the price of staying in business without destroying batches.
The operations that understand this earliest—and build their prevention infrastructure ahead of regulatory requirements rather than in response to failures—will have a structural cost advantage over those who treat prevention as reactive rather than proactive.
Reference: Oregon OLCC Sampling and Testing Metrc Guide v6.1. Oregon Health Authority testing rules are published at healthoregon.gov/marijuanatesting. Mycotoxin toxicology information draws from published IARC classification data and peer-reviewed literature on Aspergillus secondary metabolism.