Certora conducted a manual security audit of the Lulo Rust smart contracts within the Solana ecosystem from 18 November 2024 to 23 January 2025, uncovering several critical vulnerabilities such as Oracle update failures, referral fee exploits, and withdrawal manipulation. The following report provides details of these findings and reviews.