Puffer Finance

Reports by Severity

Critical | High | Medium | Low | Insight

Critical

28788 - [SC - Critical] Slash during a withdrawal from EigenLayer will ...

High

29033 - [SC - High] Queued data will be lost if Tx is unsuccessful ...
29106 - [SC - High] Insufficient Handling of Partial Failures in Wi...

Medium

Low

28623 - [SC - Low] Timelock transaction that consume more then _ g...
28663 - [SC - Low] Deposit of stETH fails due to LIDOs - wei corno...
28665 - [SC - Low] Underflow risk in receive function due to discr...
28687 - [SC - Low] Timelocks executeTransaction incorrectly delete...
28777 - [SC - Low] pufETHsrcTimelocksolexecuteTransaction - This b...
28789 - [SC - Low] Return value of call is not checked causing fai...
28792 - [SC - Low] Return value of low level isnt checked executio...
28796 - [SC - Low] The PufferVaultgetPendingLidoETHAmount will ret...
28946 - [SC - Low] The assets accounting of the vault can become o...
28971 - [SC - Low] Double spending or double execution of transact...
29015 - [SC - Low] Boolean return value of addresscall function no...
29067 - [SC - Low] Puffer Finance Missing Verification of Externa...
29116 - [SC - Low] Using deposit results in more shares for the sa...

Insight

28612 - [SC - Insight] EigenLayers share rate can be massively inflate...
28625 - [SC - Insight] Gas griefing is possible on external call
28629 - [SC - Insight] Missing restricted modifier on claimWithdrawalF...
28630 - [SC - Insight] Improper Validation for Partial Filling of INCH...
28632 - [SC - Insight] Setting delay at MINIMUM_DELAY in timelock fails
28645 - [SC - Insight] Attacker Prevents All Users From Withdrawing Fu...
28646 - [SC - Insight] Resubmission with Pause Bypass Potential Exploi...
28650 - [SC - Insight] Protocol Insolvency due to the over inflated ca...
28656 - [SC - Insight] Blocking redeemwithdraw from vault
28660 - [SC - Insight] pufETHsrcTimelock_setDelay - L State constant M...
28688 - [SC - Insight] Unhandled Failure of _executeTransaction Call i...
28695 - [SC - Insight] pufETHsrcTimelockexecuteTransaction - L The tim...
28698 - [SC - Insight] User can frontrun claim transaction to make cla...
28702 - [SC - Insight] Malicious users can frontrun permits to DoS swaps
28729 - [SC - Insight] MINIMUM_DELAY uses incorrect value of days ins...
28732 - [SC - Insight] External Call from Eigen Layer can fail silentl...
28773 - [SC - Insight] The function claimWithdrawalFromEigenLayer can ...
28775 - [SC - Insight] pufETHsrcTimelocksolexecuteTransaction - This b...
28779 - [SC - Insight] Missing sender address check in receive may lea...
28813 - [SC - Insight] PufferVaultclaimWithdrawalFromLido according to...
28827 - [SC - Insight] Multi requestid claims can trigger DOS
28833 - [SC - Insight] Missing slippage protection in functions deposi...
28852 - [SC - Insight] Reverting permit transactions caught in the cat...
28934 - [SC - Insight] TimelockcancelTransaction does not check asser...
28942 - [SC - Insight] Self Destruction of inchRouter can lead to loss...
28947 - [SC - Insight] Info
28964 - [SC - Insight] Claiming withdrawals from Lido can lead to unbo...
28991 - [SC - Insight] Contract uint delay variable cannot be set to i...
29017 - [SC - Insight] Timelock is not capable of performing payable t...
29073 - [SC - Insight] excuteTransaction in timelock contract will una...
29080 - [SC - Insight] Uninitialized uups upgradeable can lead to loss...
29081 - [SC - Insight] No constructor should be used to set in upgrade...
29082 - [SC - Insight] Restricted modifier should not be used with int...
29099 - [SC - Insight] Actual amount of stETH deposited is less than t...
29110 - [SC - Insight] Insecure Token Allowance Management in PufferDe...
29111 - [SC - Insight] Silent Failure of ERC Permit Calls in PufferDep...

Reports by Type

Smart Contract

Smart Contract

PreviousMitigation Audit _ Folks Finance 35089 - [Smart Contract - Insight] Malicious actor can control inte Next28612 - [SC - Insight] EigenLayers share rate can be massively inflate...

Last updated 1 year ago

Was this helpful?