Smart Contract Assessment
Audit · firm’s term: smart contract assessment
Halborn reviewed LI.FI (Smart Contract Assessment) on 28 Jul 2026: 5 findings, 0 critical; 1 marked fixed, 4 acknowledged.
No open critical findings
Open the reportOpen LI.FI’s security record
Report hosted on halborn.com.
Trustblock does not review code.
Findings38
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 4 | 1 |
LowA single admin signature replaces the entire contract, bypassing the configured quorum and timelockAcknowledged
The report gives no description here.
LowCaller-supplied token addresses are invoked as contracts and trusted as measurement oracles, letting anyone forge swap outputs and eventsAcknowledged
The report gives no description here.
LowThe balance-delta spend cap is vacuous whenever the declared tokens differ from the tokens named in argsAcknowledged
The report gives no description here.
LowThere is no maximum fee below total confiscation: a caller-authored route can charge 99.99 percent of the inputAcknowledged
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of LI.FI’s security record
LI.FIAudits3 audits by 3 firmsLast audit Jul 2026, by Halborn.
Critical findingsNo open critical findingsAcross 3 reports.
IncidentIncident 15 Jul 2024Source: De.Fi incident database.
Open LI.FI’s security recordSecurity firm
Halborn36 projects reviewed · 80 reports · latest Oct 2026
See Halborn’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us