Security
Lynxify smart contracts were independently audited by yAudit in July 2026. The full report is live on yAudit.
Audit partner
LYNX Token Contracts — audited by fedebianu and devtooligan
yAudit reviewed the Hedera vault, HTS bridge, strategies, keeper workflows, governance, and migration paths. The main risks were migration sequencing, permissionless keeper DEX paths, asset valuation and loss recognition, and HTS share accounting. Every reported issue was remediated; developer responses in the report mark all findings Fixed.
Audit coverage
17 production contracts (~3,049 lines) reviewed over 4 days. Libraries and interfaces in the same tree were included where they affect accounting, HTS, or keeper flows.
| Scope | Contracts | Auditor | Type | Status | Date | Report |
|---|---|---|---|---|---|---|
| LYNX Vault & HTS Bridge | LynxVault, LynxHTSBridge | yAudit | Smart Contract Audit | Complete | July 2026 | yAudit |
| Strategy Manager | StrategyManager | yAudit | Smart Contract Audit | Complete | July 2026 | yAudit |
| Liquidity Pool & Router | SaucerSwapLiquidityStrategy, LynxLpAllocator, LynxKeeperRouter | yAudit | Smart Contract Audit | Complete | July 2026 | yAudit |
| Staking Strategies | HederaStakingStrategy, LynxCompositeStakingStrategy, LynxStakingAllocator | yAudit | Smart Contract Audit | Complete | July 2026 | yAudit |
| Governance (DAO) | LynxGovernor, LynxTimelock, LynxVotes | yAudit | Smart Contract Audit | Complete | July 2026 | yAudit |
| Vault Migration | VaultMigrationStrategy | yAudit | Smart Contract Audit | Complete | July 2026 | yAudit |
Current Hedera mainnet deployment after the 26 Aug 2026 cutover. Each ID opens the contract or token on HashScan.
| Contract | Group | Hedera ID | EVM |
|---|---|---|---|
LynxVault | Vault & HTS Bridge | 0.0.10824879 | 0x0000…a52caf |
LynxHTSBridge | Vault & HTS Bridge | 0.0.10824903 | 0x0000…a52cc7 |
LYNX (HTS) | Vault & HTS Bridge | 0.0.9633601 | 0x0000…92ff41 |
StrategyManager | Strategy Manager | 0.0.10824897 | 0x0000…a52cc1 |
SaucerSwapLiquidityStrategy | Liquidity | 0.0.10824909 | 0x0000…a52ccd |
LynxLpAllocator | Liquidity | 0.0.10826537 | 0x0000…a53329 |
LynxCompositeStakingStrategy | Staking | 0.0.10824955 | 0x0000…a52cfb |
LynxStakingAllocator | Staking | 0.0.10824957 | 0x0000…a52cfd |
LynxKeeperRouter | Keeper | 0.0.10826535 | 0x0000…a53327 |
LynxGovernor | Governance | 0.0.10824979 | 0x0000…a52d13 |
LynxTimelock | Governance | 0.0.10824977 | 0x0000…a52d11 |
LynxVotes | Governance | 0.0.10824974 | 0x0000…a52d0e |
VaultMigrationStrategy Cutover relay on the retired June 2026 source manager | Vault Migration | 0.0.10824987 | 0x0000…a52d1b |
35 findings. Developer responses in the report mark every item Fixed. The yAudit write-up has technical detail, impact, and the remediating commits.
Seeding after drain made cutover impossible; seeding an empty live vault let a dust deposit capture migrated NAV. Fixed by minting bridge backing while the successor stays paused, then moving funds.
Permissionless router calls could swap and mint LP with min-out of 0 or 1. Fixed by restricting those routes to the keeper and adding amount-scaled slippage.
Withdrawals reduced the wrong cost basis after selling hold legs, so the next harvest streamed non-existent yield into NAV. Fixed by tracking basis through liquidation.
32 medium, low, and informational findings — all Fixed in the yAudit report.
Source: yAudit “LYNX Token Contracts” report, completed 2026-07-23. Reviewed commits 116b6c5 and b27206b. Fixes landed in follow-up commits listed in the yAudit report.
After the July 2026 yAudit report, production changes are layered by git ref. Vault, bridge, and strategy manager bytecode on mainnet match the audited core; keeper orchestration and pending LP work sit in separate layers. Full detail: audit delta one-pager, release gate sign-off, and mainnet catalog.
164880a
mainnet-deployment → 164880a
LynxKeeperRouter only (+ test mocks)
4-phase weeklyOps; HIP-1215 328 mitigation; vault/bridge/manager unchanged
d043385
106-lp-harvest-is-capped-at-50-txs
SaucerSwapLiquidityStrategy, LynxKeeperRouter, ILpHarvestPaged
Paged harvest pass; phase 0 holds until pass completes
37f0ee2
release-gate-lp-range-manager
Layer B + LynxLpAllocator, LpRangeMath, rotate paths, 6-phase router
Internal deep audit + RG-001–RG-009; GO with waivers at manifest SHA
Bars estimate how much of the code added since yAudit reaches an audited call, including through new helpers. Gray never does. Figures are rounded to the nearest 5%.
Colored slices on the bars above are added lines that reach these audited calls, even when the arrangement is new. Gray is added code that never reaches one: policy setters, phase counters, and similar bookkeeping.
Unchanged since yAudit. Already used by the LP strategy and composite staking. Range centering and swap minOut read the same window.
Existing SaucerSwapLiquidityStrategy entry points. Idle deploy, surplus rebalance, and unwind call them as-is.
Audited NFT ops on the LP strategy. Rebalance and idle deploy mint and resize through these calls.
Bytecode unchanged. OOR divert still books surplus with the existing push into staking.
New library for tick-band planning, surplus quotes, and trusted sqrt. TickMath grew for those ticks.
New allocator control flow. It sequences the audited swap and position calls; it does not replace them.
New LP strategy entry point. The decrease and swap underneath are the existing ones.
New multi-transaction harvest pass on the keeper and LP strategy. Gain and loss still report through the manager.
Branch release-gate-lp-range-manager signed at manifest SHA 37f0ee2: GO with waivers. Optional Echidna/Halmos gates waived (Hardhat fuzz replay passed). Testnet T-1 and T-3 passed; T-2 confirmed third-party NPM liquidity donation — PT-012 decrease-before-burn is the control. Read full sign-off.
