Napier audit

SherlockCode version: not recorded (see the report)

Audit competition · firm’s term: public contest

Sherlock reviewed Napier (Napier audit) on 20 May 2024: 11 findings, 0 critical; 8 marked fixed, 3 acknowledged.

No open critical findings
Open the reportOpen Napier’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings11

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High011
Medium027
Low000
HighDOS in the claimWithdraw function due to an incorrect check of the lastFinalizedRequestId in the EEther-Adapter.solFixed

The report gives no description here.

MediumAdapters revert when 0 shares are minted, making it impossible to deposit under certain conditionsFixed

The report gives no description here.

MediumcurrentStakeLimit depletes faster in some adapters, due to actual amount spent less than the input stakeAmountFixed

The report gives no description here.

MediumDepositing stETH to puffer finance will revert due to wrong implementation of PufETHAdapter._stake callFixed

The report gives no description here.

MediumIncorrect checking in receiveFlashLoan can cause swapETHForYt to fail unexpectedly.Fixed

The report gives no description here.

MediumKelp adapter won't allow users to deposit if getAssetCurrentLimit returns 0Fixed

The report gives no description here.

MediumMissing stake limit validation on RenzoAdapter._stakeFixed

The report gives no description here.

MediumSlippage on MetapoolRouter.addLiquidityOneETHKeepYtFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Napier’s security record

Napier
Audits4 audits by 2 firmsLast audit Feb 2026, by Pashov Audit Group.
Critical findingsNo open critical findingsAcross 4 reports.
Open Napier’s security record

Security firm

Sherlock

46 projects reviewed · 67 reports · latest Sep 2026

See Sherlock’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us