{"investigation":{"slug":"revert-lend","entity_name":"Revert Lend","trust_score":33,"severity_base":null,"score_modifier":-15,"confidence":0.72,"status":"published","content_type":"investigation","summary":"Revert Lend is a decentralized lending protocol built by Revert Finance that allows Uniswap v3 liquidity providers to use their LP positions as collateral to borrow ERC-20 tokens. The protocol has experienced two confirmed security incidents: a 2023 exploit of the V3Utils contract resulting in approximately $30,000 in losses, and a January 2026 protocol logic exploit on Base chain resulting in approximately $50,000 in losses. The protocol has undergone multiple audits but the recurrence of exploits raises questions about smart contract security practices.","sections":[{"content":"Revert Lend is a peer-to-pool lending protocol specifically designed for Uniswap v3 liquidity providers. Users deposit their Uniswap v3 LP positions — represented as NFTs — as collateral into a Vault contract and borrow ERC-20 tokens (primarily USDC) against those positions. Unlike traditional DeFi lending markets that accept standalone tokens as collateral, Revert Lend allows LPs to borrow without exiting their positions, permitting continued fee accrual and active liquidity management. The protocol is deployed on Ethereum Mainnet, Base, and Arbitrum. As of mid-2026, it reports approximately $11.19 million in total value locked across these chains: Base ($5.33M), Arbitrum ($3.92M), and Ethereum ($1.94M). The protocol also offers leverage features, allowing LPs to amplify positions using borrowed funds. Interest rates are governed by a dynamic model tied to pool utilization, with Chainlink price feeds and Uniswap v3 TWAP oracles providing dual-source price validation. Lenders receive rlTokens (e.g., rlUSDC) representing their share of the lending pool plus accrued interest.","heading":"Protocol Overview","sources":[{"url":"https://docs.revert.finance/revert/revert-lend","name":"docs.revert.finance","type":"other","credibility":3},{"url":"https://defillama.com/protocol/revert-lend","name":"defillama.com","type":"other","credibility":3},{"url":"https://x.com/revertfinance/status/1745127291171053878","name":"x.com","type":"other","credibility":3}],"severity":"medium"},{"content":"On February 18, 2023, Revert Finance's V3Utils contract was exploited, resulting in approximately $30,000 USD stolen from users. The V3Utils contract provided an 'Atomic swaps into V3 positions' feature that had not undergone a formal third-party security audit at the time. Attackers were able to execute arbitrary code from within the context of the vulnerable contract, allowing them to transfer user-approved funds without authorization. Approximately 90% of the stolen funds came from a single affected account. Revert Finance acknowledged the incident publicly and confirmed that all affected users were restituted in full via airdrops. Following the incident, the team engaged PeckShield to conduct a comprehensive audit of V3Utils before redeploying the contract. The team stated in its post-mortem that it had underestimated the risk posed by the contract because it was not designed to hold user funds directly — an assessment that proved incorrect given how approval-based transfers could be exploited from within the contract context. This incident predates the Revert Lend lending product and relates to the earlier V3Utils utility contract.","heading":"2023 V3Utils Exploit","sources":[{"url":"https://revoke.cash/exploits/revert","name":"revoke.cash","type":"other","credibility":3},{"url":"https://x.com/lunaray_sec/status/1627684699417251841","name":"x.com","type":"other","credibility":3},{"url":"https://github.com/liqtags/crypto-rekts/blob/main/rekts/Revert-Finance.md","name":"github.com","type":"other","credibility":3},{"url":"https://docs.revert.finance/revert/resources/security","name":"docs.revert.finance","type":"other","credibility":3}],"severity":"medium"},{"content":"On January 29, 2026, Revert Lend suffered a second security incident on the Base chain, classified by DeFi Llama's hack database as a 'protocol logic' vulnerability involving staked collateral. Losses in this incident were approximately $50,000 USD. The exploit targeted logic handling staked collateral positions, a distinct attack vector from the 2023 V3Utils approval exploit. Specific technical details of the exploit mechanism — including whether it involved oracle manipulation, reentrancy, or another logic flaw — have not been independently confirmed by major crypto security publications as of this writing. The incident has been flagged in connection with ZachXBT's monitoring activity. The January 2026 exploit demonstrates that despite multiple audit rounds, the protocol's novel collateral model (using Uniswap v3 LP NFTs as live collateral) continues to present edge-case attack surfaces not fully neutralized by existing audit coverage.","heading":"2026 Protocol Logic Exploit (Staked Collateral)","sources":[{"url":"https://defillama.com/protocol/revert-lend","name":"defillama.com","type":"other","credibility":3}],"severity":"medium"},{"content":"Revert Finance has engaged multiple auditors across its protocol suite. PeckShield has audited several components including Compoundor v1 (August 2022), V3Utils (post-exploit redeployment), Vesting V3Staker, Self-Compoundor, and Revert V4Utils v1.0. Hydn Security has audited Auto-Exit, Auto-Range (v1 and v2), as well as Revert Lend, V3Utils v1.1, Auto-Compound, Auto-Exit, and Auto-Range v3. In March 2024, Code4rena ran a competitive audit of the Revert Lend smart contracts with an $88,500 USDC bounty pool. Between March 4–15, 2024, auditors identified 31 unique vulnerabilities: 6 rated high severity and 27 rated medium severity. High-severity findings included: (H-01) permit2 implementation failing to validate that transferred tokens were USDC, potentially enabling vault drains; (H-02) reentrancy vulnerability via the onERC721Received callback allowing collateral token share manipulation; (H-03) the transform() function accepting arbitrary parameters enabling unauthorized access to positions owned by others; (H-04) V3Utils execute() lacking ownership validation, allowing NFT position liquidity theft; (H-05) TWAP oracle price calculation rounding errors on negative tick deltas inflating collateral values; and (H-06) liquidation prevention via malicious onERC721Received callbacks that rejected NFT returns. A follow-up mitigation review audit was conducted in April 2024. Despite these reviews, the January 2026 exploit suggests at least one protocol logic edge case survived the audit process. The protocol maintains an Immunefi bug bounty program for Compoundor with rewards up to $100,000.","heading":"Security Audits and Code4rena Findings","sources":[{"url":"https://code4rena.com/reports/2024-03-revert-lend","name":"code4rena.com","type":"other","credibility":3},{"url":"https://code4rena.com/audits/2024-03-revert-lend","name":"code4rena.com","type":"other","credibility":3},{"url":"https://code4rena.com/audits/2024-04-revert-lend-mitigation-review","name":"code4rena.com","type":"other","credibility":3},{"url":"https://docs.revert.finance/revert/resources/security","name":"docs.revert.finance","type":"other","credibility":3}],"severity":"medium"},{"content":"Revert Finance was founded in 2021 and is headquartered in Mexico City, Mexico. The publicly identified founder is Mario Romero Zavala, who previously co-founded Sixtant — a market-making firm — and served as Lead Software Engineer at Bitso, a major Latin American crypto exchange. Romero Zavala is active under the handle @mariorz on X (formerly Twitter). The protocol launched its lending product, Revert Lend, in early 2024 following a white paper announcement in January 2024. Known investors include Encode Club and FinTech Collective; Daedalus Angels has also been cited as an investor in some sources. Specific funding round sizes have not been publicly disclosed. The broader team composition beyond the founder has not been prominently disclosed in public materials reviewed for this investigation. Revert Finance has been active in the DeFi space since 2021, initially providing analytics tools for Uniswap v3 LPs before expanding into automation (Auto-Range, Auto-Compound, Auto-Exit) and lending.","heading":"Team and Background","sources":[{"url":"https://www.crunchbase.com/person/mario-romero-zavala","name":"crunchbase.com","type":"other","credibility":3},{"url":"https://www.crunchbase.com/organization/revert-cb25","name":"crunchbase.com","type":"other","credibility":3},{"url":"https://x.com/revertfinance/status/1745127291171053878","name":"x.com","type":"other","credibility":3},{"url":"https://www.rootdata.com/Projects/detail/Revert?k=NTQ1MQ%3D%3D","name":"rootdata.com","type":"other","credibility":3}],"severity":"medium"},{"content":"As of mid-2026, Revert Lend does not have a publicly confirmed governance token. The protocol launched a points program — 'Revert Points' — starting July 24, 2025, rewarding USDC lenders across Ethereum Mainnet, Base, and Arbitrum with protocol points that may convert to future token allocations. Points are distributed at rates including approximately 15.4 million per week for USDC lenders on Ethereum Mainnet. Participation in points programs carries inherent risks: points have no guaranteed value, airdrop criteria have not been publicly committed to, and the structure creates incentives for users to deposit capital into a protocol that has experienced two exploits within three years. The protocol has not announced a launch date, tokenomics design, or total supply for any future governance token. The points program has attracted third-party airdrop-farming coverage but no formal tokenomics documentation has been published by the team.","heading":"Token and Incentive Structure","sources":[{"url":"https://airdrops.io/revert-finance/","name":"airdrops.io","type":"other","credibility":3},{"url":"https://x.com/revertfinance/status/1948131869058322783","name":"x.com","type":"other","credibility":3}],"severity":"medium"},{"content":"Several risk factors warrant consideration for users of Revert Lend. First, the protocol has experienced two confirmed exploits (February 2023 and January 2026), indicating a pattern of security vulnerabilities across different product iterations and contract generations. Second, the collateral model — accepting live Uniswap v3 LP NFTs — is structurally novel and introduces complex interactions with AMM state, oracle pricing, and position management not present in conventional lending protocols, expanding the potential attack surface. Third, the Code4rena March 2024 audit identified 6 high-severity and 27 medium-severity vulnerabilities, a high finding rate for a lending protocol; while mitigations were reviewed in April 2024, the January 2026 exploit occurred after this review. Fourth, the protocol's total value locked of approximately $11 million is modest relative to leading DeFi lending protocols, meaning liquidity may be insufficient to absorb large stress scenarios or enable efficient liquidations. Fifth, the absence of a confirmed governance token creates uncertainty about the protocol's long-term incentive alignment and decentralization trajectory. Users interacting with the protocol should consider revoking token approvals after each interaction, monitoring the Immunefi bug bounty program for newly disclosed vulnerabilities, and sizing positions conservatively given the protocol's exploit history.","heading":"Risk Factors and User Considerations","sources":[{"url":"https://revoke.cash/exploits/revert","name":"revoke.cash","type":"other","credibility":3},{"url":"https://code4rena.com/reports/2024-03-revert-lend","name":"code4rena.com","type":"other","credibility":3},{"url":"https://defillama.com/protocol/revert-lend","name":"defillama.com","type":"other","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2021","event":"Revert Finance founded in Mexico City by Mario Romero Zavala, initially focused on Uniswap v3 LP analytics tools.","source":"","date_original":"2021-01-01"},{"date":"2022-08","event":"PeckShield completes audit of Compoundor v1 contract, identifying 2 low-severity issues and 1 informational recommendation.","source":"","date_original":"2022-08-01"},{"date":"2023-02-18","event":"V3Utils contract exploited; approximately $30,000 stolen from users via arbitrary code execution abusing token approvals across Ethereum, Polygon, Arbitrum, and Optimism. ~90% of losses came from a single account. Team restituted all affected users via airdrops.","source":""},{"date":"2023-03","event":"PeckShield audits V3Utils contract following the exploit. V3Utils redeployed with enhanced security measures.","source":"","date_original":"2023-03-01"},{"date":"2024-01-10","event":"Revert Finance announces Revert Lend, a new lending protocol for Uniswap v3 liquidity providers, via white paper.","source":""},{"date":"2024-03-04","event":"Code4rena competitive audit of Revert Lend begins, running through March 15, 2024 with an $88,500 USDC bounty pool.","source":""},{"date":"2024-03-15","event":"Code4rena audit concludes; 31 unique vulnerabilities identified including 6 high-severity and 27 medium-severity findings.","source":""},{"date":"2024-04","event":"Code4rena mitigation review audit for Revert Lend completed, reviewing fixes for all identified issues.","source":"","date_original":"2024-04-01"},{"date":"2025-07-24","event":"Revert Finance launches the Revert Points program, rewarding USDC lenders on Ethereum, Base, and Arbitrum as a potential precursor to a governance token.","source":""},{"date":"2026-01-29","event":"Revert Lend suffers a protocol logic exploit on Base chain classified as a staked collateral vulnerability; approximately $50,000 lost. Flagged in ZachXBT monitoring.","source":""},{"date":"2026-05","event":"Protocol reports approximately $11.19M TVL across Base, Arbitrum, and Ethereum. Revert Lend goes live on Ethereum Mainnet.","source":"","date_original":"2026-05-01"}],"sources_used":[{"url":"https://docs.revert.finance/revert/revert-lend","name":"docs.revert.finance","type":"other","archive_url":"http://web.archive.org/web/20260519005507/https://docs.revert.finance/revert/revert-lend","credibility":3,"archive_timestamp":"2026-05-19T00:55:07+00:00"},{"url":"https://defillama.com/protocol/revert-lend","name":"defillama.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://x.com/revertfinance/status/1745127291171053878","name":"x.com","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://revoke.cash/exploits/revert","name":"revoke.cash","type":"other","archive_url":"http://web.archive.org/web/20260517203637/https://revoke.cash/exploits/revert","credibility":3,"archive_timestamp":"2026-05-17T20:36:37+00:00"},{"url":"https://x.com/lunaray_sec/status/1627684699417251841","name":"x.com","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://github.com/liqtags/crypto-rekts/blob/main/rekts/Revert-Finance.md","name":"github.com","type":"other","archive_url":"https://web.archive.org/web/20260829115216/https://github.com/liqtags/crypto-rekts/blob/main/rekts/Revert-Finance.md","credibility":3,"archive_timestamp":"2026-08-29T11:52:16+00:00"},{"url":"https://docs.revert.finance/revert/resources/security","name":"docs.revert.finance","type":"other","archive_url":"http://web.archive.org/web/20260519012840/https://docs.revert.finance/revert/resources/security","credibility":3,"archive_timestamp":"2026-05-19T01:28:40+00:00"},{"url":"https://code4rena.com/reports/2024-03-revert-lend","name":"code4rena.com","type":"other","archive_url":"http://web.archive.org/web/20260513103314/https://code4rena.com/reports/2024-03-revert-lend","credibility":3,"archive_timestamp":"2026-05-13T10:33:14+00:00"},{"url":"https://code4rena.com/audits/2024-03-revert-lend","name":"code4rena.com","type":"other","archive_url":"http://web.archive.org/web/20260606113249/https://code4rena.com/audits/2024-03-revert-lend","credibility":3,"archive_timestamp":"2026-06-06T11:32:49+00:00"},{"url":"https://code4rena.com/audits/2024-04-revert-lend-mitigation-review","name":"code4rena.com","type":"other","archive_url":"http://web.archive.org/web/20250912225300/https://code4rena.com/audits/2024-04-revert-lend-mitigation-review","credibility":3,"archive_timestamp":"2025-09-12T22:53:00+00:00"},{"url":"https://www.crunchbase.com/person/mario-romero-zavala","name":"crunchbase.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.crunchbase.com/organization/revert-cb25","name":"crunchbase.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.rootdata.com/Projects/detail/Revert?k=NTQ1MQ%3D%3D","name":"rootdata.com","type":"other","archive_url":"https://web.archive.org/web/20260830074119/https://www.rootdata.com/Projects/detail/Revert?k=NTQ1MQ%3D%3D","credibility":3,"archive_timestamp":"2026-08-30T07:41:19+00:00"},{"url":"https://airdrops.io/revert-finance/","name":"airdrops.io","type":"other","archive_url":"http://web.archive.org/web/20260517062853/https://airdrops.io/revert-finance/","credibility":3,"archive_timestamp":"2026-05-17T06:28:53+00:00"},{"url":"https://x.com/revertfinance/status/1948131869058322783","name":"x.com","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null}],"source_tags":["defillama"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-05-04T02:54:13.787982+00:00","updated_at":"2026-08-30T07:44:37.079709+00:00"}}