# Puffer Finance

## Reports by Severity

[Critical](#critical) | [High](#high) | [Medium](#medium) | [Low](#low) | [Insight](#insight)

<details>

<summary>Critical</summary>

* [28788 - \[SC - Critical\] Slash during a withdrawal from EigenLayer will ...](/puffer-finance/28788-sc-critical-slash-during-a-withdrawal-from-eigenlayer-will-....md)

</details>

<details>

<summary>High</summary>

* [29033 - \[SC - High\] Queued data will be lost if Tx is unsuccessful ...](/puffer-finance/29033-sc-high-queued-data-will-be-lost-if-tx-is-unsuccessful-....md)
* [29106 - \[SC - High\] Insufficient Handling of Partial Failures in Wi...](/puffer-finance/29106-sc-high-insufficient-handling-of-partial-failures-in-wi....md)

</details>

<details>

<summary>Medium</summary>

* [28613 - \[SC - Medium\] User will lose funds](/puffer-finance/28613-sc-medium-user-will-lose-funds.md)
* [28689 - \[SC - Medium\] incorrect lidoLockedETH value can block full re...](/puffer-finance/28689-sc-medium-incorrect-lidolockedeth-value-can-block-full-re....md)
* [28921 - \[SC - Medium\] Possibly protocol insolvency during a LIDO slas...](/puffer-finance/28921-sc-medium-possibly-protocol-insolvency-during-a-lido-slas....md)
* [29006 - \[SC - Medium\] Lack of Success check of the Timelock executeT...](/puffer-finance/29006-sc-medium-lack-of-success-check-of-the-timelock-executet....md)
* [29054 - \[SC - Medium\] Lido discounted withdrawals are not accounted for](/puffer-finance/29054-sc-medium-lido-discounted-withdrawals-are-not-accounted-for.md)
* [29060 - \[SC - Medium\] initiateETHWithdrawalsFromLido decreases totalA...](/puffer-finance/29060-sc-medium-initiateethwithdrawalsfromlido-decreases-totala....md)

</details>

<details>

<summary>Low</summary>

* [28623 - \[SC - Low\] Timelock transaction that consume more then \_ g...](/puffer-finance/28623-sc-low-timelock-transaction-that-consume-more-then-_-g....md)
* [28663 - \[SC - Low\] Deposit of stETH fails due to LIDOs - wei corno...](/puffer-finance/28663-sc-low-deposit-of-steth-fails-due-to-lidos-wei-corno....md)
* [28665 - \[SC - Low\] Underflow risk in receive function due to discr...](/puffer-finance/28665-sc-low-underflow-risk-in-receive-function-due-to-discr....md)
* [28687 - \[SC - Low\] Timelocks executeTransaction incorrectly delete...](/puffer-finance/28687-sc-low-timelocks-executetransaction-incorrectly-delete....md)
* [28777 - \[SC - Low\] pufETHsrcTimelocksolexecuteTransaction - This b...](/puffer-finance/28777-sc-low-pufethsrctimelocksolexecutetransaction-this-b....md)
* [28789 - \[SC - Low\] Return value of call is not checked causing fai...](/puffer-finance/28789-sc-low-return-value-of-call-is-not-checked-causing-fai....md)
* [28792 - \[SC - Low\] Return value of low level isnt checked executio...](/puffer-finance/28792-sc-low-return-value-of-low-level-isnt-checked-executio....md)
* [28796 - \[SC - Low\] The PufferVaultgetPendingLidoETHAmount will ret...](/puffer-finance/28796-sc-low-the-puffervaultgetpendinglidoethamount-will-ret....md)
* [28946 - \[SC - Low\] The assets accounting of the vault can become o...](/puffer-finance/28946-sc-low-the-assets-accounting-of-the-vault-can-become-o....md)
* [28971 - \[SC - Low\] Double spending or double execution of transact...](/puffer-finance/28971-sc-low-double-spending-or-double-execution-of-transact....md)
* [29015 - \[SC - Low\] Boolean return value of addresscall function no...](/puffer-finance/29015-sc-low-boolean-return-value-of-addresscall-function-no....md)
* [29067 - \[SC - Low\] Puffer Finance Missing Verification of Externa...](/puffer-finance/29067-sc-low-puffer-finance-missing-verification-of-externa....md)
* [29116 - \[SC - Low\] Using deposit results in more shares for the sa...](/puffer-finance/29116-sc-low-using-deposit-results-in-more-shares-for-the-sa....md)

</details>

<details>

<summary>Insight</summary>

* [28612 - \[SC - Insight\] EigenLayers share rate can be massively inflate...](/puffer-finance/28612-sc-insight-eigenlayers-share-rate-can-be-massively-inflate....md)
* [28625 - \[SC - Insight\] Gas griefing is possible on external call](/puffer-finance/28625-sc-insight-gas-griefing-is-possible-on-external-call.md)
* [28629 - \[SC - Insight\] Missing restricted modifier on claimWithdrawalF...](/puffer-finance/28629-sc-insight-missing-restricted-modifier-on-claimwithdrawalf....md)
* [28630 - \[SC - Insight\] Improper Validation for Partial Filling of INCH...](/puffer-finance/28630-sc-insight-improper-validation-for-partial-filling-of-inch....md)
* [28632 - \[SC - Insight\] Setting delay at MINIMUM\_DELAY in timelock fails](/puffer-finance/28632-sc-insight-setting-delay-at-minimum_delay-in-timelock-fails.md)
* [28645 - \[SC - Insight\] Attacker Prevents All Users From Withdrawing Fu...](/puffer-finance/28645-sc-insight-attacker-prevents-all-users-from-withdrawing-fu....md)
* [28646 - \[SC - Insight\] Resubmission with Pause Bypass Potential Exploi...](/puffer-finance/28646-sc-insight-resubmission-with-pause-bypass-potential-exploi....md)
* [28650 - \[SC - Insight\] Protocol Insolvency due to the over inflated ca...](/puffer-finance/28650-sc-insight-protocol-insolvency-due-to-the-over-inflated-ca....md)
* [28656 - \[SC - Insight\] Blocking redeemwithdraw from vault](/puffer-finance/28656-sc-insight-blocking-redeemwithdraw-from-vault.md)
* [28660 - \[SC - Insight\] pufETHsrcTimelock\_setDelay - L State constant M...](/puffer-finance/28660-sc-insight-pufethsrctimelock_setdelay-l-state-constant-m....md)
* [28688 - \[SC - Insight\] Unhandled Failure of \_executeTransaction Call i...](/puffer-finance/28688-sc-insight-unhandled-failure-of-_executetransaction-call-i....md)
* [28695 - \[SC - Insight\] pufETHsrcTimelockexecuteTransaction - L The tim...](/puffer-finance/28695-sc-insight-pufethsrctimelockexecutetransaction-l-the-tim....md)
* [28698 - \[SC - Insight\] User can frontrun claim transaction to make cla...](/puffer-finance/28698-sc-insight-user-can-frontrun-claim-transaction-to-make-cla....md)
* [28702 - \[SC - Insight\] Malicious users can frontrun permits to DoS swaps](/puffer-finance/28702-sc-insight-malicious-users-can-frontrun-permits-to-dos-swaps.md)
* [28729 - \[SC - Insight\] MINIMUM\_DELAY uses incorrect value of days ins...](/puffer-finance/28729-sc-insight-minimum_delay-uses-incorrect-value-of-days-ins....md)
* [28732 - \[SC - Insight\] External Call from Eigen Layer can fail silentl...](/puffer-finance/28732-sc-insight-external-call-from-eigen-layer-can-fail-silentl....md)
* [28773 - \[SC - Insight\] The function claimWithdrawalFromEigenLayer can ...](/puffer-finance/28773-sc-insight-the-function-claimwithdrawalfromeigenlayer-can-....md)
* [28775 - \[SC - Insight\] pufETHsrcTimelocksolexecuteTransaction - This b...](/puffer-finance/28775-sc-insight-pufethsrctimelocksolexecutetransaction-this-b....md)
* [28779 - \[SC - Insight\] Missing sender address check in receive may lea...](/puffer-finance/28779-sc-insight-missing-sender-address-check-in-receive-may-lea....md)
* [28813 - \[SC - Insight\] PufferVaultclaimWithdrawalFromLido according to...](/puffer-finance/28813-sc-insight-puffervaultclaimwithdrawalfromlido-according-to....md)
* [28827 - \[SC - Insight\] Multi requestid claims can trigger DOS](/puffer-finance/28827-sc-insight-multi-requestid-claims-can-trigger-dos.md)
* [28833 - \[SC - Insight\] Missing slippage protection in functions deposi...](/puffer-finance/28833-sc-insight-missing-slippage-protection-in-functions-deposi....md)
* [28852 - \[SC - Insight\] Reverting permit transactions caught in the cat...](/puffer-finance/28852-sc-insight-reverting-permit-transactions-caught-in-the-cat....md)
* [28934 - \[SC - Insight\] TimelockcancelTransaction does not check asser...](/puffer-finance/28934-sc-insight-timelockcanceltransaction-does-not-check-asser....md)
* [28942 - \[SC - Insight\] Self Destruction of inchRouter can lead to loss...](/puffer-finance/28942-sc-insight-self-destruction-of-inchrouter-can-lead-to-loss....md)
* [28947 - \[SC - Insight\] Info](/puffer-finance/28947-sc-insight-info.md)
* [28964 - \[SC - Insight\] Claiming withdrawals from Lido can lead to unbo...](/puffer-finance/28964-sc-insight-claiming-withdrawals-from-lido-can-lead-to-unbo....md)
* [28991 - \[SC - Insight\] Contract uint delay variable cannot be set to i...](/puffer-finance/28991-sc-insight-contract-uint-delay-variable-cannot-be-set-to-i....md)
* [29017 - \[SC - Insight\] Timelock is not capable of performing payable t...](/puffer-finance/29017-sc-insight-timelock-is-not-capable-of-performing-payable-t....md)
* [29073 - \[SC - Insight\] excuteTransaction in timelock contract will una...](/puffer-finance/29073-sc-insight-excutetransaction-in-timelock-contract-will-una....md)
* [29080 - \[SC - Insight\] Uninitialized uups upgradeable can lead to loss...](/puffer-finance/29080-sc-insight-uninitialized-uups-upgradeable-can-lead-to-loss....md)
* [29081 - \[SC - Insight\] No constructor should be used to set in upgrade...](/puffer-finance/29081-sc-insight-no-constructor-should-be-used-to-set-in-upgrade....md)
* [29082 - \[SC - Insight\] Restricted modifier should not be used with int...](/puffer-finance/29082-sc-insight-restricted-modifier-should-not-be-used-with-int....md)
* [29099 - \[SC - Insight\] Actual amount of stETH deposited is less than t...](/puffer-finance/29099-sc-insight-actual-amount-of-steth-deposited-is-less-than-t....md)
* [29110 - \[SC - Insight\] Insecure Token Allowance Management in PufferDe...](/puffer-finance/29110-sc-insight-insecure-token-allowance-management-in-pufferde....md)
* [29111 - \[SC - Insight\] Silent Failure of ERC Permit Calls in PufferDep...](/puffer-finance/29111-sc-insight-silent-failure-of-erc-permit-calls-in-pufferdep....md)

</details>

## Reports by Type

[Smart Contract](#smart-contract)

<details>

<summary>Smart Contract</summary>

* [28612 - \[SC - Insight\] EigenLayers share rate can be massively inflate...](/puffer-finance/28612-sc-insight-eigenlayers-share-rate-can-be-massively-inflate....md)
* [28613 - \[SC - Medium\] User will lose funds](/puffer-finance/28613-sc-medium-user-will-lose-funds.md)
* [28623 - \[SC - Low\] Timelock transaction that consume more then \_ g...](/puffer-finance/28623-sc-low-timelock-transaction-that-consume-more-then-_-g....md)
* [28625 - \[SC - Insight\] Gas griefing is possible on external call](/puffer-finance/28625-sc-insight-gas-griefing-is-possible-on-external-call.md)
* [28629 - \[SC - Insight\] Missing restricted modifier on claimWithdrawalF...](/puffer-finance/28629-sc-insight-missing-restricted-modifier-on-claimwithdrawalf....md)
* [28630 - \[SC - Insight\] Improper Validation for Partial Filling of INCH...](/puffer-finance/28630-sc-insight-improper-validation-for-partial-filling-of-inch....md)
* [28632 - \[SC - Insight\] Setting delay at MINIMUM\_DELAY in timelock fails](/puffer-finance/28632-sc-insight-setting-delay-at-minimum_delay-in-timelock-fails.md)
* [28645 - \[SC - Insight\] Attacker Prevents All Users From Withdrawing Fu...](/puffer-finance/28645-sc-insight-attacker-prevents-all-users-from-withdrawing-fu....md)
* [28646 - \[SC - Insight\] Resubmission with Pause Bypass Potential Exploi...](/puffer-finance/28646-sc-insight-resubmission-with-pause-bypass-potential-exploi....md)
* [28650 - \[SC - Insight\] Protocol Insolvency due to the over inflated ca...](/puffer-finance/28650-sc-insight-protocol-insolvency-due-to-the-over-inflated-ca....md)
* [28656 - \[SC - Insight\] Blocking redeemwithdraw from vault](/puffer-finance/28656-sc-insight-blocking-redeemwithdraw-from-vault.md)
* [28660 - \[SC - Insight\] pufETHsrcTimelock\_setDelay - L State constant M...](/puffer-finance/28660-sc-insight-pufethsrctimelock_setdelay-l-state-constant-m....md)
* [28663 - \[SC - Low\] Deposit of stETH fails due to LIDOs - wei corno...](/puffer-finance/28663-sc-low-deposit-of-steth-fails-due-to-lidos-wei-corno....md)
* [28665 - \[SC - Low\] Underflow risk in receive function due to discr...](/puffer-finance/28665-sc-low-underflow-risk-in-receive-function-due-to-discr....md)
* [28687 - \[SC - Low\] Timelocks executeTransaction incorrectly delete...](/puffer-finance/28687-sc-low-timelocks-executetransaction-incorrectly-delete....md)
* [28688 - \[SC - Insight\] Unhandled Failure of \_executeTransaction Call i...](/puffer-finance/28688-sc-insight-unhandled-failure-of-_executetransaction-call-i....md)
* [28689 - \[SC - Medium\] incorrect lidoLockedETH value can block full re...](/puffer-finance/28689-sc-medium-incorrect-lidolockedeth-value-can-block-full-re....md)
* [28695 - \[SC - Insight\] pufETHsrcTimelockexecuteTransaction - L The tim...](/puffer-finance/28695-sc-insight-pufethsrctimelockexecutetransaction-l-the-tim....md)
* [28698 - \[SC - Insight\] User can frontrun claim transaction to make cla...](/puffer-finance/28698-sc-insight-user-can-frontrun-claim-transaction-to-make-cla....md)
* [28702 - \[SC - Insight\] Malicious users can frontrun permits to DoS swaps](/puffer-finance/28702-sc-insight-malicious-users-can-frontrun-permits-to-dos-swaps.md)
* [28729 - \[SC - Insight\] MINIMUM\_DELAY uses incorrect value of days ins...](/puffer-finance/28729-sc-insight-minimum_delay-uses-incorrect-value-of-days-ins....md)
* [28732 - \[SC - Insight\] External Call from Eigen Layer can fail silentl...](/puffer-finance/28732-sc-insight-external-call-from-eigen-layer-can-fail-silentl....md)
* [28773 - \[SC - Insight\] The function claimWithdrawalFromEigenLayer can ...](/puffer-finance/28773-sc-insight-the-function-claimwithdrawalfromeigenlayer-can-....md)
* [28775 - \[SC - Insight\] pufETHsrcTimelocksolexecuteTransaction - This b...](/puffer-finance/28775-sc-insight-pufethsrctimelocksolexecutetransaction-this-b....md)
* [28777 - \[SC - Low\] pufETHsrcTimelocksolexecuteTransaction - This b...](/puffer-finance/28777-sc-low-pufethsrctimelocksolexecutetransaction-this-b....md)
* [28779 - \[SC - Insight\] Missing sender address check in receive may lea...](/puffer-finance/28779-sc-insight-missing-sender-address-check-in-receive-may-lea....md)
* [28788 - \[SC - Critical\] Slash during a withdrawal from EigenLayer will ...](/puffer-finance/28788-sc-critical-slash-during-a-withdrawal-from-eigenlayer-will-....md)
* [28789 - \[SC - Low\] Return value of call is not checked causing fai...](/puffer-finance/28789-sc-low-return-value-of-call-is-not-checked-causing-fai....md)
* [28792 - \[SC - Low\] Return value of low level isnt checked executio...](/puffer-finance/28792-sc-low-return-value-of-low-level-isnt-checked-executio....md)
* [28796 - \[SC - Low\] The PufferVaultgetPendingLidoETHAmount will ret...](/puffer-finance/28796-sc-low-the-puffervaultgetpendinglidoethamount-will-ret....md)
* [28813 - \[SC - Insight\] PufferVaultclaimWithdrawalFromLido according to...](/puffer-finance/28813-sc-insight-puffervaultclaimwithdrawalfromlido-according-to....md)
* [28827 - \[SC - Insight\] Multi requestid claims can trigger DOS](/puffer-finance/28827-sc-insight-multi-requestid-claims-can-trigger-dos.md)
* [28833 - \[SC - Insight\] Missing slippage protection in functions deposi...](/puffer-finance/28833-sc-insight-missing-slippage-protection-in-functions-deposi....md)
* [28852 - \[SC - Insight\] Reverting permit transactions caught in the cat...](/puffer-finance/28852-sc-insight-reverting-permit-transactions-caught-in-the-cat....md)
* [28921 - \[SC - Medium\] Possibly protocol insolvency during a LIDO slas...](/puffer-finance/28921-sc-medium-possibly-protocol-insolvency-during-a-lido-slas....md)
* [28934 - \[SC - Insight\] TimelockcancelTransaction does not check asser...](/puffer-finance/28934-sc-insight-timelockcanceltransaction-does-not-check-asser....md)
* [28942 - \[SC - Insight\] Self Destruction of inchRouter can lead to loss...](/puffer-finance/28942-sc-insight-self-destruction-of-inchrouter-can-lead-to-loss....md)
* [28946 - \[SC - Low\] The assets accounting of the vault can become o...](/puffer-finance/28946-sc-low-the-assets-accounting-of-the-vault-can-become-o....md)
* [28947 - \[SC - Insight\] Info](/puffer-finance/28947-sc-insight-info.md)
* [28964 - \[SC - Insight\] Claiming withdrawals from Lido can lead to unbo...](/puffer-finance/28964-sc-insight-claiming-withdrawals-from-lido-can-lead-to-unbo....md)
* [28971 - \[SC - Low\] Double spending or double execution of transact...](/puffer-finance/28971-sc-low-double-spending-or-double-execution-of-transact....md)
* [28991 - \[SC - Insight\] Contract uint delay variable cannot be set to i...](/puffer-finance/28991-sc-insight-contract-uint-delay-variable-cannot-be-set-to-i....md)
* [29006 - \[SC - Medium\] Lack of Success check of the Timelock executeT...](/puffer-finance/29006-sc-medium-lack-of-success-check-of-the-timelock-executet....md)
* [29015 - \[SC - Low\] Boolean return value of addresscall function no...](/puffer-finance/29015-sc-low-boolean-return-value-of-addresscall-function-no....md)
* [29017 - \[SC - Insight\] Timelock is not capable of performing payable t...](/puffer-finance/29017-sc-insight-timelock-is-not-capable-of-performing-payable-t....md)
* [29033 - \[SC - High\] Queued data will be lost if Tx is unsuccessful ...](/puffer-finance/29033-sc-high-queued-data-will-be-lost-if-tx-is-unsuccessful-....md)
* [29054 - \[SC - Medium\] Lido discounted withdrawals are not accounted for](/puffer-finance/29054-sc-medium-lido-discounted-withdrawals-are-not-accounted-for.md)
* [29060 - \[SC - Medium\] initiateETHWithdrawalsFromLido decreases totalA...](/puffer-finance/29060-sc-medium-initiateethwithdrawalsfromlido-decreases-totala....md)
* [29067 - \[SC - Low\] Puffer Finance Missing Verification of Externa...](/puffer-finance/29067-sc-low-puffer-finance-missing-verification-of-externa....md)
* [29073 - \[SC - Insight\] excuteTransaction in timelock contract will una...](/puffer-finance/29073-sc-insight-excutetransaction-in-timelock-contract-will-una....md)
* [29080 - \[SC - Insight\] Uninitialized uups upgradeable can lead to loss...](/puffer-finance/29080-sc-insight-uninitialized-uups-upgradeable-can-lead-to-loss....md)
* [29081 - \[SC - Insight\] No constructor should be used to set in upgrade...](/puffer-finance/29081-sc-insight-no-constructor-should-be-used-to-set-in-upgrade....md)
* [29082 - \[SC - Insight\] Restricted modifier should not be used with int...](/puffer-finance/29082-sc-insight-restricted-modifier-should-not-be-used-with-int....md)
* [29099 - \[SC - Insight\] Actual amount of stETH deposited is less than t...](/puffer-finance/29099-sc-insight-actual-amount-of-steth-deposited-is-less-than-t....md)
* [29106 - \[SC - High\] Insufficient Handling of Partial Failures in Wi...](/puffer-finance/29106-sc-high-insufficient-handling-of-partial-failures-in-wi....md)
* [29110 - \[SC - Insight\] Insecure Token Allowance Management in PufferDe...](/puffer-finance/29110-sc-insight-insecure-token-allowance-management-in-pufferde....md)
* [29111 - \[SC - Insight\] Silent Failure of ERC Permit Calls in PufferDep...](/puffer-finance/29111-sc-insight-silent-failure-of-erc-permit-calls-in-pufferdep....md)
* [29116 - \[SC - Low\] Using deposit results in more shares for the sa...](/puffer-finance/29116-sc-low-using-deposit-results-in-more-shares-for-the-sa....md)

</details>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://reports.immunefi.com/puffer-finance.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.