Lombard multipauser bridge audit

Sherlock4 Apr 2026Not recorded. See the report

Sherlock reviewed Lombard (Lombard multipauser bridge audit) on 4 Apr 2026: 10 findings, 0 critical; 7 marked fixed, 3 acknowledged.

No open critical findings

Open the report Open Lombard’s security record

Report hosted on GitHub.

Statuses are the security firm’s own, from this report. Trustblock does not review code.

Findings10

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	1
Medium	0	1	1
Low	0	2	5

HighStuck funds in BridgeV2 due to overconstrained payload fieldsFixed

The report gives no description here.

Medium_changeNativeToken does not reassign CALLER_ROLEFixed

The report gives no description here.

Low_validateAndMint amountToMint > depositAmount guard always falseFixed

The report gives no description here.

LowDead code in IStakedLBTCFixed

The report gives no description here.

LowMissing whenMintBurnAllowed on redeemForBtc, deposit on native and staked LBTCFixed

The report gives no description here.

LowOPERATOR_ROLE is unused in both NativeLBTC and StakedLBTCFixed

The report gives no description here.

LowpauseMintBurn and unpauseMintBurn silently no-op while pauseTransfers and unpauseTransfers revertFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Lombard’s security record

Lombard

Audits4 audits by 3 firmsLast audit Jun 2026, by Sherlock.

Critical findingsNo open critical findingsAcross the 4 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.

Open Lombard’s security record

Security firm

Sherlock

5 projects reviewed · 7 reports · latest Jun 2026

See Sherlock’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.