Lombard-approver
Cantina reviewed Lombard (Lombard-approver) on 22 Jan 2025: 21 findings, 1 critical; all marked fixed.
Report hosted on cantina.xyz.
Trustblock does not review code.
Findings21
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 1 |
| Medium | 0 | 0 | 10 |
| Low | 0 | 0 | 9 |
Marked Informational or Gas Optimization by the firm. Not counted as findings.
InformationalAddressbook hiding not found BTC address behind a decoding errorFixed
The report gives no description here.
Gas OptimizationBabylon request are unmarshalled twice during their processingFixed
The report gives no description here.
Gas OptimizationExcessive resource consumption in validateUnstakingOutputsFixed
The report gives no description here.
InformationalIncrease consistency in string comparison using EqualFoldFixed
The report gives no description here.
InformationalNil pointer dereference and panic if staking key does not existFixed
The report gives no description here.
Gas OptimizationPerformance optimization when processing unstake notary sessionsFixed
The report gives no description here.
Gas OptimizationRedundant condition in BulkCreateUnstakesFixed
The report gives no description here.
Gas OptimizationRedundant condition in processMfaRequestFixed
The report gives no description here.
InformationalRisk of updating a unstake for nothing in BulkCreateUnstakesFixed
The report gives no description here.
InformationalTransaction output value will be truncated in logged error messageFixed
The report gives no description here.
Show 4 more
InformationalTypographical errorsFixed
The report gives no description here.
InformationalUnstrict decoding of PSBT sign requestsFixed
The report gives no description here.
InformationalUnused codeFixed
The report gives no description here.
InformationalUse .Fatal instead of Fatalf for logging error messages that do not contain placeholdersFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Lombard’s security record
LombardSecurity firm
Cantina37 projects reviewed · 175 reports · latest Oct 2026
See Cantina’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us