Lombard-approver
Cantina reviewed Lombard (Lombard-approver) on 22 Jan 2025: 35 findings, 1 critical; all marked fixed.
Report hosted on cantina.xyz.
Statuses are the security firm’s own, from this report. Trustblock does not review code.
Findings35
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 10 |
| Low | 0 | 0 | 23 |
CriticalUnstake requests can be griefed by forged and yet unconfirmed notary sessionsFixed
The report gives no description here.
HighLombard unstake functionality currently not working as expectedFixed
The report gives no description here.
MediumAll notary sessions starting from offset 0 are repeatedly processed when there are no pending unstakes or unstake receiptsFixed
The report gives no description here.
MediumApprover cannot handle "no mix" Cubist MFA signing requests that require the noMixClientSession sessionFixed
The report gives no description here.
MediumError handling in BulkCreateUnstakes could DOS the notary session processing as a wholeFixed
The report gives no description here.
MediumFailures in processReceipt may DoS the entire processingFixed
The report gives no description here.
MediumIncomplete validation of the Babylon deposit can lead to Babylon dismissing the BTC transaction or indefinite lockup of fundsFixed
The report gives no description here.
MediumIncorrect conversion of covenant public key from Babylon APIFixed
The report gives no description here.
MediumInvalid public keys can cause the approver service to panic and crashFixed
The report gives no description here.
MediumMissing validation that ensures unspent BTC is fully sent back as change in Lombard transfer signing strategyFixed
The report gives no description here.
Show 10 more
MediumNo-mix staking wallets are not fully handled in the codebaseFixed
The report gives no description here.
MediumNot all staking key enabled status are checkedFixed
The report gives no description here.
LowAddressbook hiding not found BTC address behind a decoding errorFixed
The report gives no description here.
LowAddressbook service loads config with incorrect namespace and defaults to default valuesFixed
The report gives no description here.
LowBabylon request are unmarshalled twice during their processingFixed
The report gives no description here.
LowExcessive resource consumption in validateUnstakingOutputsFixed
The report gives no description here.
LowFee depletion via many useless Bitcoin transactionsFixed
The report gives no description here.
LowIncrease consistency in string comparison using EqualFoldFixed
The report gives no description here.
LowLombard transfer can include UTXOs with very small amounts of BTC that make them economically unspendableFixed
The report gives no description here.
LowLombard unstake race condition allowing repeated payoutsFixed
The report gives no description here.
Show 10 more
LowMissing check that the deposit address is not a multisigFixed
The report gives no description here.
LowMissing validating PSBT input WitnessUtxo.PkScript against the actual UTXO ScriptPubKey allows bypassing address validationFixed
The report gives no description here.
LowNil pointer dereference and panic if staking key does not existFixed
The report gives no description here.
LowOutages in external APIs can lead to legitimate MFA requests being rejectedFixed
The report gives no description here.
LowPerformance optimization when processing unstake notary sessionsFixed
The report gives no description here.
LowPossible to approve babylon request with invalid finality provider public keyFixed
The report gives no description here.
LowPotential data inconsistency caused by errors during unstake receipt processingFixed
The report gives no description here.
LowRedundant condition in BulkCreateUnstakesFixed
The report gives no description here.
LowRedundant condition in processMfaRequestFixed
The report gives no description here.
LowRisk of updating a unstake for nothing in BulkCreateUnstakesFixed
The report gives no description here.
Show 5 more
LowTransaction output value will be truncated in logged error messageFixed
The report gives no description here.
LowTypographical errorsFixed
The report gives no description here.
LowUnstrict decoding of PSBT sign requestsFixed
The report gives no description here.
LowUnused codeFixed
The report gives no description here.
LowUse .Fatal instead of Fatalf for logging error messages that do not contain placeholdersFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Lombard’s security record
LombardSecurity firm
Cantina37 projects reviewed · 175 reports · latest Oct 2026
See Cantina’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us