Lambdaplex clears security audit with no open findings

softstack completed an independent audit of Lambdaplex’s core Hedera-based contracts and found 34 issues, including two high-severity items that were fixed before the review closed. A follow-up check found the remediations were implemented as intended, giving the protocol a fresh security checkpoint as it targets professional trading use cases.

Why it matters: - The audit gives Lambdaplex a third-party security check on the core contracts that handle trading, settlement and vault logic. - No critical issues were found, and no findings were left open at the end of the engagement. - The review reduces risk for users who depend on self-custody, price controls and deterministic execution in a non-custodial protocol.

What happened: - softstack completed an independent security audit of Lambdaplex’s core contracts. - The assessment covered four parts of the Hedera-based protocol: the balanced vault, the order hook, the settlement layer and the pro rata vault. - The audit used manual code review and automated security testing. - The review started with an initial audit in early 2026, then expanded to include settlement and the pro rata vault before ending with a final re-check in August 2026.

The details: - softstack identified 34 issues in total: 0 critical, 2 high, 11 medium, 13 low and 8 informational. - Both high-severity findings were fixed. - In total, 22 issues were resolved and 12 were formally acknowledged. - A follow-up review confirmed the remediations were implemented as intended. - The audit focused on share-accounting correctness, oracle price validation, signed-order authorization and replay protection, manager-rebalancing bounds, access control and reentrancy protection.

Between the lines: - The expanded scope suggests the protocol was still maturing while the audit was underway. - The combination of order-level controls and vault structures points to a design built for more advanced trading flows than a simple swap contract. - Zero open findings at close does not remove all risk, but it does indicate the identified issues were addressed before the engagement ended.

What’s next: - Lambdaplex will likely use the completed audit as a trust signal as it pushes toward professional and institutional trading use cases. - The protocol’s public materials point to continued focus on limit, market, stop-loss and take-profit order logic at the account level. - More information is available in Lambdaplex’s announcement and softstack’s security assessment inquiry page.

The bottom line: - Lambdaplex exits the softstack audit with no critical issues and no open findings, after fixing both high-severity problems and closing out the rest through remediation or acknowledgement.