Lombard security record
As of 14 Oct 2026, Lombard has 4 audit reports by 3 security firms on Trustblock; the latest is by Sherlock, dated 26 Jun 2026. Those reports list no open critical findings.
Record last updated . It holds audits and findings, contracts and incidents up to Oct 2026. Statuses are the security firms’ own. Trustblock does not review code.
Audits4
Newest first
| Audit | Security firm | Date | Scope | Critical findings | Report |
|---|---|---|---|---|---|
| Lombard mintlimit audit | Security firm: Sherlock | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
| Lombard multipauser bridge audit | Security firm: Sherlock | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
| Liquid Bitcoin Lombard Finance | Security firm: Ackee Blockchain Security | Date: | Scope: Not recorded. See the report | No open critical findings | Open · GitHub |
| Lombard-approver | Security firm: Cantina | Date: | Scope: Not recorded. See the report | 1 critical finding, fixed | Open · cantina.xyz |
Findings77
Statuses are the security firm’s own, from each report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 3 |
| Medium | 0 | 3 | 16 |
| Low | 0 | 6 | 48 |
CriticalUnstake requests can be griefed by forged and yet unconfirmed notary sessionsLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportHighStuck funds in BridgeV2 due to overconstrained payload fieldsLombard multipauser bridge audit · Sherlock · 4 Apr 2026Fixed
The report gives no description here.
Open the reportHighPossible unauthorized LBTC mintingLiquid Bitcoin Lombard Finance · Ackee Blockchain Security · 28 Mar 2025Fixed
The report gives no description here.
Open the reportHighLombard unstake functionality currently not working as expectedLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportMedium_changeNativeToken does not reassign CALLER_ROLELombard multipauser bridge audit · Sherlock · 4 Apr 2026Fixed
The report gives no description here.
Open the reportMediumInability to execute Cross Program Invocation due to Config account being Rent payerLiquid Bitcoin Lombard Finance · Ackee Blockchain Security · 28 Mar 2025Fixed
The report gives no description here.
Open the reportMediumInability to execute Cross Program Invocation due to immutable accountLiquid Bitcoin Lombard Finance · Ackee Blockchain Security · 28 Mar 2025Fixed
The report gives no description here.
Open the reportMediumMinters are security hazardLiquid Bitcoin Lombard Finance · Ackee Blockchain Security · 28 Mar 2025Fixed
The report gives no description here.
Open the reportMediumPossible inadequate feesLiquid Bitcoin Lombard Finance · Ackee Blockchain Security · 28 Mar 2025Fixed
The report gives no description here.
Open the reportMediumPossible initialization front-runningLiquid Bitcoin Lombard Finance · Ackee Blockchain Security · 28 Mar 2025Fixed
The report gives no description here.
Open the reportShow 10 more
MediumAll notary sessions starting from offset 0 are repeatedly processed when there are no pending unstakes or unstake receiptsLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportMediumApprover cannot handle "no mix" Cubist MFA signing requests that require the noMixClientSession sessionLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportMediumError handling in BulkCreateUnstakes could DOS the notary session processing as a wholeLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportMediumFailures in processReceipt may DoS the entire processingLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportMediumIncomplete validation of the Babylon deposit can lead to Babylon dismissing the BTC transaction or indefinite lockup of fundsLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportMediumIncorrect conversion of covenant public key from Babylon APILombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportMediumInvalid public keys can cause the approver service to panic and crashLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportMediumMissing validation that ensures unspent BTC is fully sent back as change in Lombard transfer signing strategyLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportMediumNo-mix staking wallets are not fully handled in the codebaseLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportMediumNot all staking key enabled status are checkedLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportShow 10 more
Low_mintWithFee fee-bound inconsistency (a mount == fee allowed)Lombard mintlimit audit · Sherlock · 26 Jun 2026Fixed
The report gives no description here.
Open the reportLowAssetRouterChanged event parameter order mismatchLombard mintlimit audit · Sherlock · 26 Jun 2026Fixed
The report gives no description here.
Open the reportLowBridgeTokenAdapter changeBridgeToken should be removedLombard mintlimit audit · Sherlock · 26 Jun 2026Fixed
The report gives no description here.
Open the reportLowProof-mint rate-limit bucket is shared across all users (address(this) keying) on NativeLBTC & BridgeTokenAdapterLombard mintlimit audit · Sherlock · 26 Jun 2026Fixed
The report gives no description here.
Open the reportLowStale checkSignature NatSpec after EIP-7702 changeLombard mintlimit audit · Sherlock · 26 Jun 2026Fixed
The report gives no description here.
Open the reportLowStale natspec in BridgeTokenAdapter's _c onfirmDeposit & _changeBridgeTokenLombard mintlimit audit · Sherlock · 26 Jun 2026Fixed
The report gives no description here.
Open the reportLowUnused IERC20 / SafeERC20 import and using directive in StakedLBTCLombard mintlimit audit · Sherlock · 26 Jun 2026Fixed
The report gives no description here.
Open the reportLowUnused Math import in BridgeTokenAdapter and StakedLBTCLombard mintlimit audit · Sherlock · 26 Jun 2026Fixed
The report gives no description here.
Open the reportLow_validateAndMint amountToMint > depositAmount guard always falseLombard multipauser bridge audit · Sherlock · 4 Apr 2026Fixed
The report gives no description here.
Open the reportLowDead code in IStakedLBTCLombard multipauser bridge audit · Sherlock · 4 Apr 2026Fixed
The report gives no description here.
Open the reportShow 10 more
LowMissing whenMintBurnAllowed on redeemForBtc, deposit on native and staked LBTCLombard multipauser bridge audit · Sherlock · 4 Apr 2026Fixed
The report gives no description here.
Open the reportLowOPERATOR_ROLE is unused in both NativeLBTC and StakedLBTCLombard multipauser bridge audit · Sherlock · 4 Apr 2026Fixed
The report gives no description here.
Open the reportLowpauseMintBurn and unpauseMintBurn silently no-op while pauseTransfers and unpauseTransfers revertLombard multipauser bridge audit · Sherlock · 4 Apr 2026Fixed
The report gives no description here.
Open the reportLowBascule Initialization front-runningLiquid Bitcoin Lombard Finance · Ackee Blockchain Security · 28 Mar 2025Fixed
The report gives no description here.
Open the reportLowCode quality can be improvedLiquid Bitcoin Lombard Finance · Ackee Blockchain Security · 28 Mar 2025Fixed
The report gives no description here.
Open the reportLowDeprecated Cross Program Invocation callLiquid Bitcoin Lombard Finance · Ackee Blockchain Security · 28 Mar 2025Fixed
The report gives no description here.
Open the reportLowFields might be uninitializedLiquid Bitcoin Lombard Finance · Ackee Blockchain Security · 28 Mar 2025Fixed
The report gives no description here.
Open the reportLowInability to transfer BasculeData authorityLiquid Bitcoin Lombard Finance · Ackee Blockchain Security · 28 Mar 2025Fixed
The report gives no description here.
Open the reportLowInability to transfer Config authorityLiquid Bitcoin Lombard Finance · Ackee Blockchain Security · 28 Mar 2025Fixed
The report gives no description here.
Open the reportLowInaccurate commentLiquid Bitcoin Lombard Finance · Ackee Blockchain Security · 28 Mar 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowTreasury might cause protocol not operationalLiquid Bitcoin Lombard Finance · Ackee Blockchain Security · 28 Mar 2025Fixed
The report gives no description here.
Open the reportLowUnfinished code may trigger undesired behaviorLiquid Bitcoin Lombard Finance · Ackee Blockchain Security · 28 Mar 2025Fixed
The report gives no description here.
Open the reportLowUniqueness of Role- based Access Control is not guaranteedLiquid Bitcoin Lombard Finance · Ackee Blockchain Security · 28 Mar 2025Fixed
The report gives no description here.
Open the reportLowUnnecessary storage of the Bascule program in the Config accountLiquid Bitcoin Lombard Finance · Ackee Blockchain Security · 28 Mar 2025Fixed
The report gives no description here.
Open the reportLowUnstakeRequest does not take fee into considerationLiquid Bitcoin Lombard Finance · Ackee Blockchain Security · 28 Mar 2025Fixed
The report gives no description here.
Open the reportLowAddressbook hiding not found BTC address behind a decoding errorLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowAddressbook service loads config with incorrect namespace and defaults to default valuesLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowBabylon request are unmarshalled twice during their processingLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowExcessive resource consumption in validateUnstakingOutputsLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowFee depletion via many useless Bitcoin transactionsLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportShow 10 more
LowIncrease consistency in string comparison using EqualFoldLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowLombard transfer can include UTXOs with very small amounts of BTC that make them economically unspendableLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowLombard unstake race condition allowing repeated payoutsLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowMissing check that the deposit address is not a multisigLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowMissing validating PSBT input WitnessUtxo.PkScript against the actual UTXO ScriptPubKey allows bypassing address validationLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowNil pointer dereference and panic if staking key does not existLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowOutages in external APIs can lead to legitimate MFA requests being rejectedLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowPerformance optimization when processing unstake notary sessionsLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowPossible to approve babylon request with invalid finality provider public keyLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowPotential data inconsistency caused by errors during unstake receipt processingLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportShow 8 more
LowRedundant condition in BulkCreateUnstakesLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowRedundant condition in processMfaRequestLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowRisk of updating a unstake for nothing in BulkCreateUnstakesLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowTransaction output value will be truncated in logged error messageLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowTypographical errorsLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowUnstrict decoding of PSBT sign requestsLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowUnused codeLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportLowUse .Fatal instead of Fatalf for logging error messages that do not contain placeholdersLombard-approver · Cantina · 22 Jan 2025Fixed
The report gives no description here.
Open the reportContracts
No deployed address is recorded for these audits.
The reports name a repository or files. Open a report to see its scope.
Show this on your site
Is this your project? Show this record on your own website. The label states what the record holds, links to this page and updates by itself. It is free and needs no sign-in.
Content
Automatic: the three strongest facts of this project’s own record (its last audit and two more), highlighted. They update with the record. Picking a fact turns Automatic off.
Style
Format
<head><script src="https://widget.trustblock.run/project-widget.min.js" defer></script></head><body><divdata-tb-project-widgetdata-tb-project-slug="lombard"></div></body>
Paste the code where the label should appear. It uses no API credit and updates by itself.
Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us