Lambdaplex Completes Independent Security Audit with softstack
softstack has completed an independent security audit of Lambdaplex’s core contracts. The audit identified 34 issues: 0 critical, 2 high, 11 medium, 13 low
softstack(opens in new tab) has completed an independent security audit of Lambdaplex(opens in new tab)’s core contracts. The assessment covered four pillars of the Hedera-based protocol: the balanced vault, the order hook, the settlement layer, and the pro rata vault.
Also Read: IT Tech Pulse Exclusive Interview with Pete Johnson Field CTO, Artificial Intelligence at MongoDB
The Softstack audit team conducted a manual code review and automated security testing. The audit identified 34 issues: 0 critical, 2 high, 11 medium, 13 low, and 8 informational. Both high-severity findings were fixed. In total, 22 issues were resolved and 12 were formally acknowledged, with none left open at the close of the engagement. A follow-up review confirmed that the remediations were implemented as intended.
The review focused on share-accounting correctness, oracle price validation, signed-order authorization and replay protection, manager-rebalancing bounds, access control, and reentrancy protection. The engagement began with an initial audit in early 2026 and later expanded to include settlement and the pro rata vault before closing with a final re-check in August.
Lambdaplex is a Hedera-native, non-custodial on-chain trading protocol. It places limit, market, stop-loss, and take-profit order logic at the account level through Hiero Hooks and the Hedera Token Service, so custody remains with the user while brokers, solvers, or matching engines can execute open orders. The hook independently validates each transfer against the user’s price limits, slippage bounds, and oracle-based triggers.
Alongside the order hook, Lambdaplex operates a settlement layer for final on-chain trade execution, a balanced vault with oracle-driven inventory policy, and a pro rata vault whose shares represent a proportional claim on live two-asset inventory without an external price feed. The protocol targets professional and institutional trading use cases that need deterministic execution and strong self-custody.
Also Read: IT Tech Pulse Exclusive Interview with Paul Forte, Chief Executive Officer of JupiterOne
Write to us [wasim.a@demandmediaagency.com] to learn more about our exclusive editorial packages and programmes.
