Lombard Finance

Lombard Finance receives a D+ risk grade (60/100) from Hindenrank, where lower scores indicate lower risk. Category-leading product with substantial TVL but a multi-layered trust stack that the April 2026 KelpDAO exploit showed is genuinely vulnerable. Treat as high-risk yield. Lombard Finance issues LBTC — a liquid receipt for BTC staked via Babylon, now the leading BTC LRT by TVL at ~$1.5B. LBTC is distributed across 15+ chains and integrated with EigenLayer and the major DeFi lending protocols. The upside is real yield on your Bitcoin. The downside is a stack of trust assumptions: Babylon covenant committee, Cubist custody, a Security Consortium attestation set, and multi-chain bridges — any of which could fail. After the April 2026 KelpDAO bridge exploit cost $292M and cascaded into Aave, the exact same attack template now applies to LBTC's multi-chain deployment.

The key risks identified for Lombard Finance are: (1) Multi-chain deployment means a bridge/verifier flaw on any single chain could let attackers mint LBTC without backing — same pattern that just hit Kelp for $292M (2) BTC backing sits inside Cubist custody infrastructure — if Cubist is compromised, LBTC backing is at risk (3) A trusted 'Security Consortium' signs mint attestations; consortium collusion or compromise would inflate supply (4) LBTC is widely used as DeFi collateral, so any depeg cascades into Aave/Morpho/Spark liquidations (5) Upstream Babylon slashing is socialised across all LBTC holders

Lombard Finance scores 60/100 across eight risk dimensions: Mechanism Novelty: 9/15, Interaction Severity: 14/20, Oracle Surface: 6/10, Documentation Gaps: 5/10, Track Record: 8/15, Scale Exposure: 7/10, Regulatory Risk: 5/10, Vitality Risk: 6/10. The highest risk area is Interaction Severity at 14/20.

Among 26 rated Restaking protocols on Hindenrank, Lombard Finance ranks #25 by safety (lowest risk score = safest). Its 60/100 risk score and D+ grade place it among the riskier Restaking protocols.

Lombard Finance scores 8/15 on the Track Record risk dimension, indicating some history of security incidents or exploits. Higher scores reflect more severe or frequent incidents. Review the full risk report for details.