Hyperlend Protocol
Ackee Blockchain Security reviewed HyperLend (Hyperlend Protocol) on 24 Mar 2025: 44 findings, 1 critical; 29 marked fixed, 14 acknowledged, 1 open.
Report hosted on GitHub.
Statuses are the security firm’s own, from this report. Trustblock does not review code.
Findings44
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 1 |
| Medium | 0 | 1 | 12 |
| Low | 1 | 13 | 15 |
CriticalNo revert on stale Chainlink priceFixed
The report gives no description here.
HighPossible locked tokensFixed
The report gives no description here.
MediumArbitrary token transfer through unrestricted refund functionFixed
The report gives no description here.
MediumDivide before multiply in openPosition functionFixed
The report gives no description here.
MediumInconsistent token symbol formattingFixed
The report gives no description here.
MediumIncorrect proposal ID emittedFixed
The report gives no description here.
MediumIncorrect token balance check leading to failed position closuresFixed
The report gives no description here.
MediumminAmountOut calculation too restrictiveFixed
The report gives no description here.
MediumMissing payable modifierFixed
The report gives no description here.
MediumMissing support for bridging native tokensFixed
The report gives no description here.
Show 10 more
MediumMissing token validation in bridge initiationFixed
The report gives no description here.
MediumNative transfer revert out-of-gasFixed
The report gives no description here.
MediumSafeERC20 not usedFixed
The report gives no description here.
MediumWalletBalanceProvider native tokens lockupFixed
The report gives no description here.
LowCase insensitive importFixed
The report gives no description here.
LowHardhat console importsFixed
The report gives no description here.
LowInconsistent visibility for _reversePath functionFixed
The report gives no description here.
LowIncorrect documentationFixed
The report gives no description here.
LowIncorrect error messagesFixed
The report gives no description here.
LowIncorrect token balance used for debt value calculationFixed
The report gives no description here.
Show 9 more
LowIncorrect variable naming due to typoFixed
The report gives no description here.
LowMissing check to catch underflow errorFixed
The report gives no description here.
LowMissing swap deadline protectionFixed
The report gives no description here.
LowMissing underscore in internal function nameFixed
The report gives no description here.
LowNative token recovery can be bypassedFixed
The report gives no description here.
LowPotential negative exponent in CHAINLINK_NORMALIZATION calculationFixed
The report gives no description here.
LowUnsatisfiable condition on closing positions with flashloansFixed
The report gives no description here.
LowUnused function with potential data truncation riskFixed
The report gives no description here.
LowVariables can be immutableFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of HyperLend’s security record
HyperLendSecurity firm
Ackee Blockchain Security39 projects reviewed · 81 reports · latest Jul 2026
See Ackee Blockchain Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us