Kelp security record

Arbitrum, Base, Ethereum, Scrollkelpdao.xyzX

As of 2 Nov 2026, Kelp has 3 audit reports by 1 security firm on Trustblock; the latest is by Sigma Prime, dated 1 Jun 2024. Those reports list no open critical findings.

Critical findings
No open critical findings
Across the 3 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it. See the findings
Open the latest report
Your label, live
Get the label for your site

Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Trustblock does not review code.

Audits3

Newest first

AuditSecurity firmDateScopeCritical findingsReport
Lrt Updates security reviewSecurity firm: Sigma PrimeDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub
Lrt Withdrawals security reviewSecurity firm: Sigma PrimeDate: Scope: Not recorded (see the report)2 critical findings, fixedOpen · GitHub
Lrt security reviewSecurity firm: Sigma PrimeDate: Scope: Not recorded (see the report)No open critical findingsOpen · GitHub

Findings21

Statuses are the security firm’s own, from each report.

SeverityOpenAcknowledgedFixed
Critical002
High001
Medium016
Low065

Marked Informational by the firms. Not counted as findings.

InformationalGas Efficiency Concern With NDC IterationLrt Withdrawals security review · Sigma Prime · 1 Jun 2024Acknowledged

The report gives no description here.

Open the report
InformationalOperational Redundancy In Node Delegator Limit ManagementLrt Withdrawals security review · Sigma Prime · 1 Jun 2024Acknowledged

The report gives no description here.

Open the report
InformationalUnimplemented receive() Functions in Unstaking AdaptersLrt Updates security review · Sigma Prime · 1 Jun 2024Acknowledged

The report gives no description here.

Open the report
InformationalInability To Remove Supported AssetsLrt security review · Sigma Prime · 1 Dec 2023Acknowledged

The report gives no description here.

Open the report
InformationalMiscellaneous General CommentsLrt security review · Sigma Prime · 1 Dec 2023Acknowledged

The report gives no description here.

Open the report
InformationalPotential For Inconsistent lrtConfig Across ContractsLrt security review · Sigma Prime · 1 Dec 2023Acknowledged

The report gives no description here.

Open the report
InformationalPotential Inconsistencies & Miscalculations With Asset StrategiesLrt security review · Sigma Prime · 1 Dec 2023Acknowledged

The report gives no description here.

Open the report
InformationalConversion Limit Mapping Access RestrictedLrt Withdrawals security review · Sigma Prime · 1 Jun 2024Fixed

The report gives no description here.

Open the report
InformationalDuplicate Code in rsETH Amount CalculationLrt Withdrawals security review · Sigma Prime · 1 Jun 2024Fixed

The report gives no description here.

Open the report
InformationalEnhancement For Asset Strategy Verification In getAssetsUnstakingLrt Withdrawals security review · Sigma Prime · 1 Jun 2024Fixed

The report gives no description here.

Open the report
Show 10 more
InformationalGas Inefficiency In Multiple Modifier ChecksLrt Withdrawals security review · Sigma Prime · 1 Jun 2024Fixed

The report gives no description here.

Open the report
InformationalGas OptimisationsLrt Updates security review · Sigma Prime · 1 Jun 2024Fixed

The report gives no description here.

Open the report
InformationalMiscellaneous General CommentsLrt Updates security review · Sigma Prime · 1 Jun 2024Fixed

The report gives no description here.

Open the report
InformationalMiscellaneous General CommentsLrt Withdrawals security review · Sigma Prime · 1 Jun 2024Fixed

The report gives no description here.

Open the report
InformationalMissing Event Emission In transferBackToLRTDepositPool()Lrt Withdrawals security review · Sigma Prime · 1 Jun 2024Fixed

The report gives no description here.

Open the report
InformationalMissing Input Checks In completeUnstaking()Lrt Withdrawals security review · Sigma Prime · 1 Jun 2024Fixed

The report gives no description here.

Open the report
InformationalPotential OutOfGas Revert On receive() FunctionLrt Withdrawals security review · Sigma Prime · 1 Jun 2024Fixed

The report gives no description here.

Open the report
InformationalSuperfluous Handling In NodeDelegator receive FunctionLrt Withdrawals security review · Sigma Prime · 1 Jun 2024Fixed

The report gives no description here.

Open the report
InformationalUse of General receive() Functions is DiscouragedLrt Updates security review · Sigma Prime · 1 Jun 2024Fixed

The report gives no description here.

Open the report
InformationalUse OpenZeppelin’s SafeERC20 Over Standard ERC20Lrt Withdrawals security review · Sigma Prime · 1 Jun 2024Fixed

The report gives no description here.

Open the report
Show 1 more
InformationalUse of Deprecated Chainlink FunctionLrt security review · Sigma Prime · 1 Dec 2023Fixed

The report gives no description here.

Open the report

Contracts

No deployed address is recorded for these audits.

The reports name a repository or files. Open a report to see its scope.

Show this on your site

Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.

Content

Facts

Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.

Fixed as
Language

Style

Layout
Theme
Accent
Corners

Format

Size
Date
Embed as
HTML
<head>
<script src="https://widget.trustblock.run/project-widget.min.js" defer></script>
</head>
<body>
<div
data-tb-project-widget
data-tb-project-slug="kelp"
></div>
</body>

Paste the code where the label should appear. It uses no API credit and updates by itself.

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us