Back

Lido v2 off-chain

5/10/2023Published
ID
Severity
Status
Title 11 Findings
2.1.1
MAJOR
ACKNOWLEDGED

Abnormal CL rebase condition of the bunker mode depends on the manipulatable value of the WithdrawalVault balance in abnormal_cl_rebase.py

2.1.2
MAJOR
ACKNOWLEDGED

Abnormal CL rebase condition of the bunker mode depends on the manipulatable value of the validators real balances in abnormal_cl_rebase.py

2.1.3
MAJOR
ACKNOWLEDGED

Normal CL rebase calculation depends on the manipulatable value of validators' effective balances in abnormal_cl_rebase.py

2.1.4
MAJOR
ACKNOWLEDGED

The finalization_share_rate value can be artificially inflated in accounting.py

2.1.5
MAJOR
ACKNOWLEDGED

Bunker mode condition calculation is based on average values over skipped frames in bunker.py

2.2.1
WARNING
ACKNOWLEDGED

Withdrawal queue finalization sequence can be manipulated in withdrawal.py

2.2.2
WARNING
FIXED

latest_to_exit_validators_count takes a non-zero value when there are no validators to exit in ejector.py

2.3.1
INFO
ACKNOWLEDGED

Repetitive deposits and withdrawals are able to exhaust available validators' keys.

2.3.2
INFO
ACKNOWLEDGED

Malicious activity of a node operator may affect the normal workflow of the protocol or result in a financial loss

2.3.3
INFO
ACKNOWLEDGED

A protocol user and a node operator can be a single entity performing coordinated actions in the protocol

2.3.4
INFO
ACKNOWLEDGED

Prediction of withdrawal_epoch without taking activation_epoch into account in ejector.py

Please select finding