Liquid Bitcoin Lombard Finance
Ackee Blockchain Security reviewed Lombard (Liquid Bitcoin Lombard Finance) on 28 Mar 2025: 22 findings, 0 critical; 18 marked fixed, 4 acknowledged.
Report hosted on GitHub.
Statuses are the security firm’s own, from this report. Trustblock does not review code.
Findings22
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 1 |
| Medium | 0 | 1 | 5 |
| Low | 0 | 3 | 12 |
HighPossible unauthorized LBTC mintingFixed
The report gives no description here.
MediumInability to execute Cross Program Invocation due to Config account being Rent payerFixed
The report gives no description here.
MediumInability to execute Cross Program Invocation due to immutable accountFixed
The report gives no description here.
MediumMinters are security hazardFixed
The report gives no description here.
MediumPossible inadequate feesFixed
The report gives no description here.
MediumPossible initialization front-runningFixed
The report gives no description here.
LowBascule Initialization front-runningFixed
The report gives no description here.
LowCode quality can be improvedFixed
The report gives no description here.
LowDeprecated Cross Program Invocation callFixed
The report gives no description here.
LowFields might be uninitializedFixed
The report gives no description here.
Show 8 more
LowInability to transfer BasculeData authorityFixed
The report gives no description here.
LowInability to transfer Config authorityFixed
The report gives no description here.
LowInaccurate commentFixed
The report gives no description here.
LowTreasury might cause protocol not operationalFixed
The report gives no description here.
LowUnfinished code may trigger undesired behaviorFixed
The report gives no description here.
LowUniqueness of Role- based Access Control is not guaranteedFixed
The report gives no description here.
LowUnnecessary storage of the Bascule program in the Config accountFixed
The report gives no description here.
LowUnstakeRequest does not take fee into considerationFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Lombard’s security record
LombardSecurity firm
Ackee Blockchain Security39 projects reviewed · 81 reports · latest Jul 2026
See Ackee Blockchain Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us