ListaDAO security record
As of 9 Nov 2026, ListaDAO has 13 audit reports by 3 security firms on Trustblock; the latest is by BlockSec, dated 1 Dec 2025. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.
Audits13
Newest first
| Report | Security firm | Date | Scope | Critical findings | Source |
|---|---|---|---|---|---|
| Lista Lending audit | Security firm: BlockSec | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| SpearBit V3 LP 01Sept 2025 security review | Security firm: Cantina | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Lista Dao Contracts audit | Security firm: BlockSec | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Lista Lending Provider audit | Security firm: BlockSec | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Blocksec Lista LPTokenProvider V1.0 Signed | Security firm: BlockSec | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Lista Lending audit | Security firm: BlockSec | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Blocksec Lista SlisbnbProvider VotingIncentive V1. | Security firm: BlockSec | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| PSM audit | Security firm: BlockSec | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Lista Token audit | Security firm: BlockSec | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Lista Dao Contracts audit | Security firm: BlockSec | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Lista Dao Contracts audit | Security firm: BlockSec | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| ListaOFT audit | Security firm: BlockSec | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
| Lista: Lista Oracles audit | Security firm: PeckShield | Date: | Scope: Not recorded; see the report | None open | GitHub ↗ |
Findings99
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed | Mitigated |
|---|---|---|---|---|
| Critical | 0 | 0 | 0 | 0 |
| High | 0 | 0 | 14 | 0 |
| Medium | 0 | 7 | 13 | 0 |
| Low | 0 | 22 | 42 | 1 |
MediumConflicting delegatee synchronization between contracts Security IssueLista Lending audit · BlockSec · 1 Dec 2025Acknowledged
The report gives no description here.
Open the reportMediumImmutable delegatee assignment once slisBNBxMinter is set Security IssueLista Lending audit · BlockSec · 1 Dec 2025Acknowledged
The report gives no description here.
Open the reportMediumLiquidation DoS risk from deny-list tokensSpearBit V3 LP 01Sept 2025 security review · Cantina · 17 Sep 2025Acknowledged
The report gives no description here.
Open the reportMediumToken price scaling mechanics will not work for tokens with high decimalsSpearBit V3 LP 01Sept 2025 security review · Cantina · 17 Sep 2025Acknowledged
The report gives no description here.
Open the reportMediumDelayed synchronization of user LP token balancesBlocksec Lista LPTokenProvider V1.0 Signed · BlockSec · 3 Apr 2025Acknowledged
The report gives no description here.
Open the reportMediumIncorrect calculations in function estimatedLiquidationPriceHAY()Lista Dao Contracts audit · BlockSec · 6 Aug 2024Acknowledged
The report gives no description here.
Open the reportMediumIncorrect duty returned in function calculateDuty()Lista Dao Contracts audit · BlockSec · 6 Aug 2024Acknowledged
The report gives no description here.
Open the reportLowPotential zero token minting in function _mintToMPCs()Lista Lending audit · BlockSec · 1 Dec 2025Acknowledged
The report gives no description here.
Open the reportLowStale LP_USD syncing on depositSpearBit V3 LP 01Sept 2025 security review · Cantina · 17 Sep 2025Acknowledged
The report gives no description here.
Open the reportLowApply bound check for feeRateLista Dao Contracts audit · BlockSec · 3 Sep 2025Acknowledged
The report gives no description here.
Open the reportShow 10 more
LowLack of invoking function _disableInitializers()Lista Dao Contracts audit · BlockSec · 3 Sep 2025Acknowledged
The report gives no description here.
Open the reportLowRevise the annotationsLista Dao Contracts audit · BlockSec · 3 Sep 2025Acknowledged
The report gives no description here.
Open the reportLowAdd rescue token functionality in SlisBNBProvider and BNBProvider contractsLista Lending Provider audit · BlockSec · 12 May 2025Acknowledged
The report gives no description here.
Open the reportLowPotential DoS due to the lack of callback implementationsLista Lending Provider audit · BlockSec · 12 May 2025Acknowledged
The report gives no description here.
Open the reportLowLack of pause check in function syncUserLp()Blocksec Lista LPTokenProvider V1.0 Signed · BlockSec · 3 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowPotential DoS risk in the reallocate() functionLista Lending audit · BlockSec · 3 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowPotential replay attacks due to the chain hard forkLista Lending audit · BlockSec · 3 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowRedundant balance check in function _safeBurnLp()Blocksec Lista LPTokenProvider V1.0 Signed · BlockSec · 3 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowRemove the improperly used and unused codeLista Lending audit · BlockSec · 3 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowRevise the method used for the transfer of native tokensLista Lending audit · BlockSec · 3 Apr 2025Acknowledged
The report gives no description here.
Open the reportShow 9 more
LowUnify the use of the _updateLastTotalAssets() function for updating the variable lastTotalAssetsLista Lending audit · BlockSec · 3 Apr 2025Acknowledged
The report gives no description here.
Open the reportLowPotential unfair rewards distribution due to improperly updating adminVoterBlocksec Lista SlisbnbProvider VotingIncentive V1. · BlockSec · 26 Nov 2024Acknowledged
The report gives no description here.
Open the reportLowRedundant codePSM audit · BlockSec · 22 Nov 2024Acknowledged
The report gives no description here.
Open the reportLowTimely update of snapshot during distributor updatePSM audit · BlockSec · 22 Nov 2024Acknowledged
The report gives no description here.
Open the reportLowLack of check in function adminTransfer()Lista Token audit · BlockSec · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowRedundant codeLista Token audit · BlockSec · 16 Oct 2024Acknowledged
The report gives no description here.
Open the reportLowLack of rate update in function setCollateralParams()Lista Dao Contracts audit · BlockSec · 6 Aug 2024Acknowledged
The report gives no description here.
Open the reportLowPotential precision loss in function liquidationPriceForDebt()Lista Dao Contracts audit · BlockSec · 6 Aug 2024Acknowledged
The report gives no description here.
Open the reportLowLack of check of duplicated configurationListaOFT audit · BlockSec · 19 Jun 2024Acknowledged
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="lisusd"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us