INDEPENDENT CRASH TESTSTEST PROTOCOL PUBLISHED IN FULLRATINGS YOU CANNOT BUYEVERY REPORT DATED & RE-TESTEDPROTOCOLS TESTED ACROSS 12 CHAINSNEW: BRIDGE CRASH SERIES · READ NOW
← Safety Ratings
BULWARK CRASH REPORT · CR-1011

Pendle V2

Vaults & Yield · Ethereum · Arbitrum · BNB

Report statusValidVerificationVERIFIEDTested 21 Sept 2026 · Valid until 21 Mar 2027

Verdict Rating

2 of 5 · 59 / 100 overall

“A strong safety posture with no material failures in the reviewed scenarios.”

Rubric Breakdown

AreaScoreWeight
Depositor Protection5340%
Market Stress6425%
Exit & Liquidity6015%
Safety Assist6520%

Area scores

Depositor Protection53 / 100 · weight 40%
Sets the rating
Market Stress64 / 100 · weight 25%
Exit & Liquidity60 / 100 · weight 15%
Safety Assist65 / 100 · weight 20%

Test Evidence

Report IDCR-1011
Tested21 Sept 2026
Valid until21 Mar 2027
Fork blockEthereum - block 23370000
TVL at test$67.5M
Versionv3.3.0

Scenario Results

Open a scenario for its setup and recorded result.

Frontal DrainFailed

Setup. Common attack classes are run against the deployment: reentrancy, rounding and precision, access control, flash loans, and donation attacks.

Recorded result. Common attack classes tested against the contracts.

Fork block
Ethereum - block 23370000
Reproduction script
Not published for this report.
Pole TestFailed

Setup. One privileged key (admin, owner, or a single signer) is assumed leaked or misused.

Recorded result. Privileged key and upgrade path reviewed.

Fork block
Ethereum - block 23370000
Reproduction script
Not published for this report.
Side ImpactDegraded

Setup. The oracle price is pushed ±30% for one block, or through a flash loan on the source pool.

Recorded result. Oracle stress and flash-loan price impact tested.

Fork block
Ethereum - block 23370000
Reproduction script
Not published for this report.
RolloverFailed

Setup. The main collateral or stablecoin depegs to 0.80 for six hours.

Recorded result. Collateral depeg and liquidation path reviewed.

Fork block
Ethereum - block 23370000
Reproduction script
Not published for this report.
Rear ImpactDegraded

Setup. 30% of TVL is withdrawn within 24 hours by many addresses.

Recorded result. Exit queue and stressed withdrawal tested.

Fork block
Ethereum - block 23370000
Reproduction script
Not published for this report.

Findings

  • Depositor Protection is the limiting area at 53/100 and sets the rating.
  • 0 of five reviewed scenarios held; 5 recorded a degraded or failed result.
  • The reviewed deployment spans Ethereum, Arbitrum, BNB and carries an overall weighted score of 59/100.
  • The report covers the tested contracts only; integrations outside that scope are not included.

Visual record

Schematic visual record · CR-1011One report.
Five scenarios.
One verdict.

Verified Resources

Limitations of Assessment

  • Scores reflect the deployment and chain set reviewed for this report.
  • On-chain metrics are measured at the test block and may move after publication.
  • The report covers the tested contracts, not integrations outside that scope.

Member Reports

Member Reports · not part of the rating0reports filed
Safety rating · set by the lab2 / 5Signed rating

Test History

ReportTestedVersionStars
CR-101121 Sept 2026v3.3.02 / 5

Protocol badge

BULWARK safety rating: Pendle V2, 2 of 5 stars

Embed this rating on the protocol site. The badge links back to this report.

<a href="https://bulwarkproof.tech/ratings/pendle-v2/"><img src="https://bulwarkproof.tech/badge/pendle-v2.svg" alt="BULWARK safety rating: Pendle V2, 2 of 5 stars" width="320" height="112"></a>
Signed by Test Director21 Sept 2026
MethodologyBULWARK Test Protocol v1.0
Fork blockEthereum - block 23370000

BULWARK · Tested · Unbuyable · Re-tested