Lombard mintlimit audit
Sherlock reviewed Lombard (Lombard mintlimit audit) on 26 Jun 2026: 10 findings, 0 critical; 8 marked fixed, 2 acknowledged.
Report hosted on GitHub.
Statuses are the security firm’s own, from this report. Trustblock does not review code.
Findings10
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 1 | 0 |
| Low | 0 | 1 | 8 |
Low_mintWithFee fee-bound inconsistency (a mount == fee allowed)Fixed
The report gives no description here.
LowAssetRouterChanged event parameter order mismatchFixed
The report gives no description here.
LowBridgeTokenAdapter changeBridgeToken should be removedFixed
The report gives no description here.
LowProof-mint rate-limit bucket is shared across all users (address(this) keying) on NativeLBTC & BridgeTokenAdapterFixed
The report gives no description here.
LowStale checkSignature NatSpec after EIP-7702 changeFixed
The report gives no description here.
LowStale natspec in BridgeTokenAdapter's _c onfirmDeposit & _changeBridgeTokenFixed
The report gives no description here.
LowUnused IERC20 / SafeERC20 import and using directive in StakedLBTCFixed
The report gives no description here.
LowUnused Math import in BridgeTokenAdapter and StakedLBTCFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Lombard’s security record
LombardSecurity firm
Sherlock5 projects reviewed · 7 reports · latest Jun 2026
See Sherlock’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us