November 4, 2026
Clarity Alliance
36
Findings Breakdown
Executive Summary
A security review of the Zest Protocol CLMM smart contracts, implemented in Clarity on the Stacks blockchain and covering the pool, router, LP token, vault, orderbook, and governance contracts. The review identified findings related to LP share mint capacity, post-condition protections, price limit enforcement, swap output floors, managed-order accounting, vault authorization, and governance controls.
About Zest
Zest Protocol is the capital layer for Bitcoin, turning Bitcoin from an idle asset into productive capital. Bitcoin Collateral Vaults let holders borrow stablecoins against BTC or put it to work on any chain that can read a proof. The team has built on Bitcoin since 2021 and previously ran a $100M+ Bitcoin credit market on Stacks. Zest Protocol CLMM is a concentrated-liquidity market maker and decentralized exchange on Stacks. Liquidity providers deposit two tokens into pools and place liquidity inside chosen price intervals, or bins, so the same capital trades with greater depth inside the selected range and earns fees from swaps that pass through it. Each pool divides its price axis into fixed-width geometric steps of 1%, 5%, 10%, or 20%, and each bin holds its own trading curve, reserves, and fungible shares.
Findings Summary
This security review identified a total of 36 findings:
All findings were thoroughly documented and communicated to the Zest team. For detailed analysis and remediation recommendations, please refer to the full report.