Ensuro Strategy Vault
Summary
The Ensuro Vault is a multi-strategy vault that accepts user deposits and allocates them across multiple investment strategies (e.g., AaveV3, CompoundV3, or stable swaps) through delegate calls. Each strategy manages its own portion of the deposited funds within a single vault, while the deposit and withdrawal process relies on the vault's queue mechanism to coordinate operations. Quantstamp reviewed the vault strategies, as well as the vault and access control design, and identified 7 findings and 4 suggestions for code improvements. The most notable issues revolve around unclaimed rewards in `CompoundV3InvestStrategy.disconnect()` (ENS-1), potential collisions in function selectors due to the XOR-based approach in `getForwardToStrategySelector()` (ENS-2), and a partial reset of outflow data when changing slotsize in the `OutflowLimitedAMMSV` contract (ENS-3). Overall, the codebase is thoughtfully designed and well-tested, with a comprehensive test suite demonstrating solid coverage. We recommend the client to consider all identified issues. **Fix Review**: The client resolved all issues by implementing fixes, mitigating, or acknowledging them.
Issues (7)
Low | Medium | High | Critical | Total | |
|---|---|---|---|---|---|
Not fixed | 3 | - | - | - | 3 |
Fixed | 4 | - | - | - | 4 |
| Total | 7 | 0 | 0 | 0 | 7 |