Lithium Finance security record
As of 3 Nov 2026, Lithium Finance has 1 audit report on Trustblock, by CertiK, dated 13 Dec 2022. That report lists no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Nov 2026. Trustblock does not review code.
Audits1
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Lithium Finance Ⅳ | Security firm: CertiK | Date: | Scope: Files named in the report | No open critical findings | Open · skynet.certik.com |
Findings14
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 1 | 0 |
| Medium | 0 | 1 | 0 |
| Low | 0 | 7 | 5 |
LowKey values could be set without reasonable boundaLithium Finance Ⅳ · CertiK · 13 Dec 2022Fixed
The variable `_burnRate` and `maxRewardRp` could be set without reasonable boundaries, hence they could be set arbitrarily.
Open the reportLowLogical issue of `refundAnswer()`Lithium Finance Ⅳ · CertiK · 13 Dec 2022Fixed
Whether the price expert's answer is correct or not, the corresponding stake token and RP_TOKEN can always be refunded. Therefore, the staked token cannot restrict malicious quotations, and as a winner, the staked token cannot affect the reward obtained. Hence we would like to know the role of the staked token.
Open the reportLowLogical issue of the `withinStakeLimits()`Lithium Finance Ⅳ · CertiK · 13 Dec 2022Fixed
When the values of `_stakeToken` and `_rp` are both greater than their respective thresholds (`tokenStakeThreshold` and `rpStakeThreshold`), the `maxRPMultiplier` should ensure that the result of `(_rp * enquiries[_enquiryId].maxRPMultiplier) / precision` is greater than the `tokenStakeThreshold`, or the transaction will be reverted. This condition is necessary to prevent potential issues with the stake thresholds.
Open the reportLowTokens refunded to an EOA instead of the `seeker`Lithium Finance Ⅳ · CertiK · 13 Dec 2022Fixed
When invoking `refundEnquiry()`, all of the reward tokens are transferred to the `treasury` instead of the seeker who initially provide the fund.
Open the reportLowUnlocked Compiler VersionLithium Finance Ⅳ · CertiK · 13 Dec 2022Fixed
The contracts cited have an unlocked compiler version. An unlocked compiler version in the source code of the contract permits the user to compile it at or above a particular version. This, in turn, leads to differences in the generated bytecode between compilations due to differing compiler version numbers. This can lead to ambiguity when debugging, as compiler-specific bugs may occur in the codebase that would be hard to identify over a span of multiple compiler versions rather than a specific one.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="lithium-finance"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us