Softstack Completes Smart Contract Security Audit of the BloomBeans Protocol

Softstack, an ISO 27001-certified European cybersecurity firm, has completed an independent smart contract security audit of the BloomBeans protocol.

BERLIN, GERMANY, August 19, 2026 /EINPresswire.com/ -- Softstack, an ISO 27001-certified European cybersecurity firm, has completed an independent smart contract security audit of the BloomBeans protocol. The engagement covered the protocol's full core contract suite and resulted in 17 findings identified, 17 findings resolved, and no open findings remaining in the final report.

BloomBeans is a decentralized financial protocol built on Ethereum. Its native token, BEAN, serves as the system's currency: a utility token under MiCA Regulation (EU) 2023/1114, in which all protocol interactions are denominated. The protocol operates with a maximum supply of 21 billion BEAN and an emission rate that decreases as total supply grows, with reward rates set on-chain by the GlobalMarker system.

The audit combined manual expert review with automated security testing, followed by a dedicated remediation and re-validation phase. The review focused on the areas most critical to the BloomBeans architecture, including registered-minter access control on the BEAN token, reward-accounting logic for user-minted Smart Trustless Assets (STAs), BEAN-denominated loan mechanics, supply-based reward-rate tiers, Merkle-based airdrop claims, and multisig-governed registry administration.

Audit Scope
The reviewed suite included:
- Bean (ERC-20): Utility token with registered-minter access control
- Income and Savings STAs (ERC-1155): User-minted Smart Trustless Assets with BEAN-denominated loan mechanics and migration support
- SavingsData and metadata libraries: On-chain accounting and metadata support
- GlobalMarker: Supply-based reward-rate tiers
- Airdrop: Dual Merkle claim systems
- Referral: Tiered reward distribution
- Registry: Contract address management with multisig governance
- Event: Time-based reward allotments
- Formatters: On-chain metadata rendering

Results
- 17 findings identified and 17 findings resolved
- Severity breakdown: 1 High, 7 Medium, 9 Low
- No open findings remained after remediation and re-check
- All fixes were verified in a dedicated re-validation round against the audited codebase

Representative fixes included resolving a principal-lockout condition in STA reward claims at maturity; preventing retroactive changes to reward tables that could affect existing STA accounting; adding pause checks and transfer restrictions to STA loan flows; hardening Merkle claim encoding and root update behavior for airdrops; and migrating sensitive administrative operations to multisig governance.

Quote
"When a protocol is governed by code, security becomes part of the product itself. Our work on BloomBeans focused on the logic that directly affects token behavior, rewards, and user protections. The team addressed every finding, and closing the engagement with zero open issues is a meaningful outcome for any protocol operating in a regulated environment."
Yannik Heinze, CEO, softstack


Quote
"Security and legal clarity are foundational to BloomBeans. softstack brought a rigorous, highly professional approach to the audit, helped us examine the protocol's core mechanics in depth, and worked closely with us through remediation until every finding was resolved."
Marcos , CEO, BloomBeans

About BloomBeans
BloomBeans is a decentralized financial protocol built on Ethereum. Users mint their own ERC-1155 Smart Trustless Assets (STAs) in the form of Savings and Income instruments by committing BEAN for a chosen period. The protocol then generates mathematically predetermined BEAN rewards at the reward rate set by the GlobalMarker system. These BEAN-denominated assets can be held for scheduled distributions, used as collateral for BEAN-denominated smart contract loans, or transferred peer-to-peer on-chain. The protocol also includes referral rewards, Merkle-based airdrops, and an event-driven reward system for community participation.

For legal and token documentation, see https://bloombeans.io/bloombeans-legal-ath21.pdf
For more information, visit www.bloombeans.io

About Softstack
Softstack is a European cybersecurity and software developer company founded in 2017. The firm provides smart contract audits, blockchain security reviews, Web3 penetration testing, digital asset risk assessments, and security consulting for protocols, enterprises, token issuers, custodians, banks, and regulated digital asset institutions. softstack is ISO 27001 certified and has completed 1,200+ audits across 20+ chains, securing more than $100B in TVL with zero known post-audit exploits.

For security assessment inquiries, visit www.softstack.io or contact hello@softstack.io


This press release is provided for informational purposes. The audit report is available on request. References to MiCA reflect the regulatory context in which BloomBeans operates; this press release is not legal advice and is not a regulatory determination by any competent authority.

Florian Protschka
softstack.io
+49 461 40772079
email us here
Visit us on social media:
LinkedIn
X