INDEPENDENT CRASH TESTSTEST PROTOCOL PUBLISHED IN FULLRATINGS YOU CANNOT BUYEVERY REPORT DATED & RE-TESTEDPROTOCOLS TESTED ACROSS 12 CHAINSNEW: BRIDGE CRASH SERIES · READ NOW
← Safety Ratings
BULWARK CRASH REPORT · CR-1030

SparkLend

Lending & Money Markets · Ethereum

Report statusValidVerificationVERIFIEDTested 29 Oct 2026 · Valid until 29 Apr 2027

Verdict Rating

3 of 5 · 78 / 100 overall

“The tested deployment needs stronger safeguards before it can reach the next band.”

Rubric Breakdown

AreaScoreWeight
Depositor Protection8440%
Market Stress6825%
Exit & Liquidity7515%
Safety Assist8020%

Area scores

Depositor Protection84 / 100 · weight 40%
Market Stress68 / 100 · weight 25%
Sets the rating
Exit & Liquidity75 / 100 · weight 15%
Safety Assist80 / 100 · weight 20%

Test Evidence

Report IDCR-1030
Tested29 Oct 2026
Valid until29 Apr 2027
Fork blockEthereum - block 25973000
TVL at test$147.0M
Versionv4.1.0

Scenario Results

Open a scenario for its setup and recorded result.

Frontal DrainHeld

Setup. Common attack classes are run against the deployment: reentrancy, rounding and precision, access control, flash loans, and donation attacks.

Recorded result. Common attack classes tested against the contracts.

Fork block
Ethereum - block 25973000
Reproduction script
Not published for this report.
Pole TestHeld

Setup. One privileged key (admin, owner, or a single signer) is assumed leaked or misused.

Recorded result. Privileged key and upgrade path reviewed.

Fork block
Ethereum - block 25973000
Reproduction script
Not published for this report.
Side ImpactDegraded

Setup. The oracle price is pushed ±30% for one block, or through a flash loan on the source pool.

Recorded result. Oracle stress and flash-loan price impact tested.

Fork block
Ethereum - block 25973000
Reproduction script
Not published for this report.
RolloverDegraded

Setup. The main collateral or stablecoin depegs to 0.80 for six hours.

Recorded result. Collateral depeg and liquidation path reviewed.

Fork block
Ethereum - block 25973000
Reproduction script
Not published for this report.
Rear ImpactDegraded

Setup. 30% of TVL is withdrawn within 24 hours by many addresses.

Recorded result. Exit queue and stressed withdrawal tested.

Fork block
Ethereum - block 25973000
Reproduction script
Not published for this report.

Findings

  • Market Stress is the limiting area at 68/100 and sets the rating.
  • 2 of five reviewed scenarios held; 3 recorded a degraded or failed result.
  • The reviewed deployment spans Ethereum and carries an overall weighted score of 78/100.
  • The report covers the tested contracts only; integrations outside that scope are not included.

Visual record

Schematic visual record · CR-1030One report.
Five scenarios.
One verdict.

Verified Resources

Limitations of Assessment

  • Scores reflect the deployment and chain set reviewed for this report.
  • On-chain metrics are measured at the test block and may move after publication.
  • The report covers the tested contracts, not integrations outside that scope.

Member Reports

Member Reports · not part of the rating0reports filed
Safety rating · set by the lab3 / 5Signed rating

Test History

ReportTestedVersionStars
CR-103029 Oct 2026v4.1.03 / 5

Protocol badge

BULWARK safety rating: SparkLend, 3 of 5 stars

Embed this rating on the protocol site. The badge links back to this report.

<a href="https://bulwarkproof.tech/ratings/sparklend/"><img src="https://bulwarkproof.tech/badge/sparklend.svg" alt="BULWARK safety rating: SparkLend, 3 of 5 stars" width="320" height="112"></a>
Signed by Test Director29 Oct 2026
MethodologyBULWARK Test Protocol v1.0
Fork blockEthereum - block 25973000

BULWARK · Tested · Unbuyable · Re-tested