Audit Report
Paladin reviewed unshETH (Audit Report) on 15 Jun 2023: 32 findings, 0 critical; 6 marked fixed, 22 acknowledged, 4 open.
No open critical findings
Open the reportOpen unshETH’s security record
Report hosted on paladinsec.co.
Trustblock does not review code.
Findings32
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 0 |
| High | 0 | 0 | 0 |
| Medium | 2 | 1 | 3 |
| Low | 2 | 21 | 3 |
MediumLSD array logic is flawed, allowing for the first LSD to be added and enumerability to be more limited than it needs to beOpen
The report gives no description here.
MediumThe external deposit_stEth function is broken as it does not pull in any stETH from the userOpen
The report gives no description here.
Lowdeposit_lsd lacks a reentrancy guardOpen
The report gives no description here.
LowShangai time safeguard is futile as it can be called repeatedlyOpen
The report gives no description here.
Contracts in scope6
| Address | Chain | Source code |
|---|---|---|
| 0x0ae38f7e10a43b5b2fb064b42a2f4514cba909ef | Chain: Ethereum | Source code: Verified source |
| 0xc258ff338322b6852c281936d4edeff8adff23ee | Chain: Ethereum | Source code: Verified source |
| 0xb250216b5bce306fa37f7de76a82409663ed52c3 | Chain: Ethereum | Source code: Verified source |
| 0x1a890ebcd20a9fb551c0440428805bc24ef62641 | Chain: Ethereum | Source code: Verified source |
| 0x35636b85b68c1b4a216110fb3a5fb447a99db14a | Chain: Ethereum | Source code: Verified source |
| 0x51a80238b5738725128d3a3e06ab41c1d4c05c74 | Chain: Ethereum | Source code: Verified source |
Part of unshETH’s security record
unshETHAudits3 audits by 2 firmsLast audit Jun 2023, by Paladin.
Critical findingsNo open critical findingsAcross 3 reports.
IncidentIncident 30 May 2023Source: De.Fi incident database.
Open unshETH’s security recordSecurity firm
Paladin176 projects reviewed · 241 reports · latest Apr 2025
See Paladin’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us