Project Information
CATEGORY
Liquid staking protocol
NETWORK
Ethereum
WEBSITE
https://www.lombard.finance/
DESCRIPTION
From May. 6, 2024 to May. 9, 2024, Lombard engaged Veridise to review the security of their LBTC project, a BTC liquid staking protocol. This initial review covered their Ethereum-side on-chain contracts used to mint and burn LBTC based on BTC deposits or withdrawal requests. The Veridise team conducted the assessment over 6 person-days with 2 engineers, using a combination of tool-assisted analysis and extensive manual code review.
Later, from June 21, 2024 to June 25, 2024, Veridise was engaged again by Lombard to review an updated version of the LBTC project at commit b42ac63. This new version included features allowing LBTC to be transferred cross-chain on supported networks. This assessment was carried out over 3 person-days with 1 engineer, employing the same thorough approach as the initial review.
Audit Report
SCOPE
Review 1: The scope of the review for the first version was limited to the solidity contracts provided in archive smart-contracts-d4b11f36b8ba68c095464ab6990fb83e9c405638.zip with SHA256 checksum: 1b56c9de6bce8a075a5ccc32d39ba85f31682d1ef32485bf280e68aeae5204bc
Review 2: The scope of the review for the bridge logic addition was limited to the solidity contracts at the commit b42ac63.
Review 3: During the second review, the Veridise auditors examined the differences in previously audited contracts. The original results can be found in the Appendix