Launchnodes Lido Impact Staking

The setImplementetion function is executed without authorization in NGOLisFactory

Withdrawal of more ETH from the protocol than returned by Lido in NGOLis

Decrease in stETH balance due to slashing or penalties is not accounted for in NGOLis

Rounding during division leads to accumulation of undistributed rewards on the contract in NGOLis

Contract lock risk on initial stake in NGOLis

Unrestricted withdrawal of small stETH/wstETH amounts in NGOLis

Underflow when attempting to withdraw asset from prevRewards in NGOLis

Incorrect update of lastNGOBalance in NGOLis

Risk of Zero Calculation for Low _ratio and _ngoAssets in NGOLis

Underflow occurring during validator slashing events in NGOLis

Unwithdrawable balance after withdrawal in NGOLis

Possible to pass a zero _amount in NGOLis

Inconsistency in the calculation of userTotalShareWithNgoReward and rewardToNgo in NGOLis

User does not receive rewards for staking when shares == 0 in NGOLis

Possible to receive a zero amount of shares when converting non-zero assets in NGOLis

Proxy creation uses ERC1967Proxy instead of NGOLisProxy in NGOLisFactory

Function __ReentrancyGuard_init is not called during initialization in NGOLis

Insufficient validation of the size of _amount for withdrawal requests in NGOLis

Users cannot withdraw stuck funds from the contract in NGOLis

Incorrect value in the WithdrawClaimed event in NGOLis

StakeInfo is not updated during withdraw operations in NGOLis

Equality of minimum values for different tokens wstEth and stEth in NGOLis

Zero ratio after rounding during division in NGOLis

Delay between reward distributions changes after contract initialization in NGOLis

Setting msg.sender instead of owner in the mapping ownerToNgo in NGOLisFactory

Inconsistency in error notification methods in NGOLis

No _disableInitializers call in the constructor in NGOLis

Redundant storage of the totalAssets value in NGOLis

Suboptimal handling of storage variables in NGOLis

No parameter validation in NGOLis

Interface not used in IAccountOracle.sol

Unused variable _prevRewards in NGOLis

Redundant check for unsigned value being negative in NGOLis

Balance calculation before checking for stake existence in NGOLis

Insufficient validation in the case of the very first stake in NGOLis

Event name in the specification is misleading in NGOLisFactory

Similar code in identical functions in NGOLis

Transfer of zero _fee is possible in NGOLis

No setter parameter validation in NGOLis

Simultaneous use of uint and uint256 types

Redundant increment operation in NGOLis

Suboptimal computation of user balance in NGOLis

Missing functionality for mistaken tokens and ETH withdrawal in NGOLis

Unused contracts in NGOLis.sol, NGOLisFactory.sol

Unused error in NGOLis

Misleading variable name wstAmount instead of stAmount in NGOLis

Incorrect event parameter value wstEth instead of stEth in NGOLis

Inconsistent state variable naming style in NGOLis, NGOLisFactory

Missing event emissions in setters in NGOLis, NGOLisFactory

Missing parameter validation in NGOLis, NGOLisFactory

Setting msg.sender as owner during deployment in NGOLisFactory