Puffer security review

Nethermind Security16 Apr 2024Code version: not recorded (see the report)

Audit · firm’s term: security review

Nethermind Security reviewed Puffer (Puffer security review) on 16 Apr 2024: 8 findings, 0 critical; 6 marked fixed, 2 acknowledged.

No open critical findings

Open the report Open Puffer’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings8

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	1
Medium	0	1	1
Low	0	1	4

HighPotential front-running provisionNode(...) to overwrite withdrawal credentialFixed

The report gives no description here.

MediumThe check in setting fees is wrongFixed

The report gives no description here.

LowIncorrect index used when calculating sharesWithdrawnFixed

The report gives no description here.

LowNo check of low-level call executionFixed

The report gives no description here.

LownumberOfActiveValidators variable is not updated when skipProvisioning(...) is calledFixed

The report gives no description here.

LowThreshold is not checked when removing guardiansFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Puffer’s security record

Puffer

Audits1 audit by 1 firmLast audit Apr 2024, by Nethermind Security.

Critical findingsNo open critical findingsIn 1 report.

Open Puffer’s security record

Security firm

Nethermind Security

57 projects reviewed · 81 reports · latest Sep 2026

See Nethermind Security’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.