Softstack completes audit of BloomBeans protocol with no open findings

Softstack finished an independent smart contract security audit of the BloomBeans protocol and closed all 17 findings after remediation. The review covered core token, reward and governance contracts for the Ethereum-based DeFi protocol, which positions the result as a key security milestone ahead of broader use.

Why it matters: - A clean audit result can reduce smart contract risk for BloomBeans users, token holders and counterparties. - The review focused on protocol logic that controls token behavior, rewards, loans and administrative access. - BloomBeans operates in a regulated context tied to MiCA references in the release.

What happened: - Softstack completed an independent smart contract security audit of the BloomBeans protocol. - The work covered the protocol’s full core contract suite. - The audit found 17 issues, and BloomBeans resolved all 17. - The final report ended with no open findings. - The announcement was dated Aug. 19, 2026.

The details: - Softstack is an ISO 27001-certified European cybersecurity firm. - BloomBeans is a decentralized financial protocol built on Ethereum. - The native BEAN token functions as the system currency and is described as a utility token under MiCA Regulation (EU) 2023/1114. - The protocol has a maximum supply of 21 billion BEAN. - The emission rate decreases as total supply grows. - Reward rates are set on-chain by the GlobalMarker system. - The audit used manual expert review, automated security testing, remediation and re-validation. - The review focused on registered-minter access control for BEAN. - The review also covered reward-accounting logic for user-minted Smart Trustless Assets, or STAs. - The scope included BEAN-denominated loan mechanics, supply-based reward-rate tiers, Merkle-based airdrop claims and multisig-governed registry administration. - The audited suite included Bean, Income and Savings STAs, SavingsData and metadata libraries, GlobalMarker, Airdrop, Referral, Registry, Event and Formatters. - The severity breakdown was 1 high, 7 medium and 9 low findings. - Representative fixes addressed a principal-lockout condition in STA reward claims at maturity. - Other fixes prevented retroactive changes to reward tables that could affect existing STA accounting. - Additional changes added pause checks and transfer restrictions to STA loan flows. - The remediation work hardened Merkle claim encoding and root-update behavior for airdrops. - Sensitive administrative operations were moved to multisig governance. - Softstack said the team verified all fixes in a dedicated re-validation round. - Softstack CEO Yannik Heinze said closing the engagement with zero open issues is meaningful for a protocol operating in a regulated environment. - BloomBeans CEO Marcos said the audit helped the team examine the protocol’s core mechanics in depth and work through remediation until every finding was resolved. - The full legal and token documentation is available as the legal document.

Between the lines: - The audit outcome suggests BloomBeans is trying to pair DeFi functionality with tighter operational controls. - The fixes point to the parts of the protocol most likely to affect user funds, claims and reward calculations. - Zero open findings does not remove all risk, but it gives the protocol a stronger security baseline after remediation.

What's next: - The audit report is available on request. - BloomBeans is expected to lean on the completed remediation as it advances protocol use and communications. - Security assessment inquiries for Softstack can go through its website or hello@softstack.io.

The bottom line: - Softstack says BloomBeans finished its core smart contract audit with every finding resolved and no open issues remaining.