Affine Labs - UltraETH LRT
Quantstamp reviewed Affine Labs (Affine Labs - UltraETH LRT) on 26 Jun 2024: 7 findings, 0 critical; 4 marked fixed, 2 acknowledged, 1 open.
Report hosted on certificate.quantstamp.com.
Statuses are the security firm’s own, from this report. Trustblock does not review code.
Findings7
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 0 | 0 | 2 |
| Low | 1 | 2 | 2 |
LowCannot Control Assets Distribution to Delegators Due to Ordered Liquidation DesignAcknowledged
In `_liquidationRequest()`, the assets are withdrew from the delegators following their order in the delegator list (`delegatorQueue`). In this case, the early created delegators will always be liquidated first. This makes it hard to maintain a certain balance/distribution to different delegators in the system, unless the manager manually re-distribute the assets.
LowOne State Variable Cannot Track Both FactoriesAcknowledged
The `UltraLRT` contract has only one state variable, `delegatorFactory`, of type `address` to track the factory. This setup cannot track both `SymDelegatorFactory` and `DelegatorFactory`, with the latter being for EigenLayer delegators.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Repository and files the report names (10)
- EigenDelegator.sol
- DelegatorFactory.sol
- SymDelegatorFactory.sol
- AffineDelegator.sol
- DelegatorBeacon.sol
- SymbioticDelegator.sol
- WithdrawalEscrowV2.sol
- IDelegator.sol
- UltraLRTStorage.sol
- UltraLRT.sol
Part of Affine Labs’s security record
Security firm
Quantstamp236 projects reviewed · 333 reports · latest Oct 2026
See Quantstamp’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us