Lombard Finance: Strategy Smart Contracts audit report
Project Information
CATEGORY
Smart Contracts
NETWORK
Ethereum
WEBSITE
https://www.lombard.finance/
DESCRIPTION
From May 18, 2026 to May 26, 2026, Lombard engaged Veridise to conduct a security assessment of their Strategy Smart Contracts. The security assessment covered the implementation of a strategy share system where users can deposit multiple supported assets through pricing converters, receive strategy shares, pay configurable deposit/redemption/management/performance fees, and redeem asynchronously through operator-fulfilled requests. Veridise conducted the assessment over 12 person-days, with 2 security analysts reviewing the project over 6 days. The review strategy involved a tool-assisted analysis of the program source code performed by Veridise security analysts as well as thorough code review.
Audit Report
SCOPE
The scope of this security assessment is limited to the contracts in contracts/strategy/. It should be noted that in addition to auditing the implementations in that folder at 3a34f90, Veridise auditors also reviewed the changes in this pull request which slightly adjusts the price-posting functionality to include adjustment based on shares added or removed since the price was recorded before calling the function and this pull request which makes a number of small changes and optimizations including adding checking of the blocklist on all calls to _update. Veridise auditors also reviewed the changes introduced by this commit, this commit, and this commit which introduced the ability to change the token name/symbol, added a getter for the deposit assets, and made some minor contract size optimizations respectively.