Audit Report

Paladin15 Jun 20236 addresses on Ethereum

Paladin reviewed unshETH (Audit Report) on 15 Jun 2023: 32 findings, 0 critical; 6 marked fixed, 22 acknowledged, 4 open.

No open critical findings

Open the report Open unshETH’s security record

Report hosted on paladinsec.co.

Trustblock does not review code.

Findings32

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	2	1	3
Low	2	21	3

MediummigrateVault contains an error which prevents this function from being called, preventing the team from ever executing migrationsAcknowledged

The report gives no description here.

LowDivision is done before multiplication within exit, causing unnecessary precision lossAcknowledged

The report gives no description here.

LowGas optimizationAcknowledged

The report gives no description here.

LowGas optimizationsAcknowledged

The report gives no description here.

LowGas optimizationsAcknowledged

The report gives no description here.

LowGas optimizationsAcknowledged

The report gives no description here.

LowGas optimizationsAcknowledged

The report gives no description here.

Lowlsds lacks a length function, making it tedious for the frontend to explore the array efficientlyAcknowledged

The report gives no description here.

LowLSDVault is not sufficiently redundant against compromised LSDs, allowing a hacked LSD to potentially drain the vaultAcknowledged

The report gives no description here.

LowSet of minters lacks proper enumerabilityAcknowledged

The report gives no description here.

Show 10 more

LowSome interfaces do not match the actual function interface which may cause issues with future compiler versionsAcknowledged

The report gives no description here.

LowThe minter_burn_from function is redundantAcknowledged

The report gives no description here.

LowThe zero address can claim ownershipAcknowledged

The report gives no description here.

LowTypographical errorAcknowledged

The report gives no description here.

LowTypographical issueAcknowledged

The report gives no description here.

LowTypographical issueAcknowledged

The report gives no description here.

LowTypographical issuesAcknowledged

The report gives no description here.

LowTypographical issuesAcknowledged

The report gives no description here.

LowTypographical issuesAcknowledged

The report gives no description here.

LowTypographical issuesAcknowledged

The report gives no description here.

Show 2 more

LowvdAMM lacks edge-case safeguardsAcknowledged

The report gives no description here.

LowwithdrawStuckEth might not work with certain multi-signature wallets and timelocked ownersAcknowledged

The report gives no description here.

Contracts in scope6

Address	Chain	Source code
0x0ae38f7e10a43b5b2fb064b42a2f4514cba909ef	Chain: Ethereum	Source code: Verified source
0xc258ff338322b6852c281936d4edeff8adff23ee	Chain: Ethereum	Source code: Verified source
0xb250216b5bce306fa37f7de76a82409663ed52c3	Chain: Ethereum	Source code: Verified source
0x1a890ebcd20a9fb551c0440428805bc24ef62641	Chain: Ethereum	Source code: Verified source
0x35636b85b68c1b4a216110fb3a5fb447a99db14a	Chain: Ethereum	Source code: Verified source
0x51a80238b5738725128d3a3e06ab41c1d4c05c74	Chain: Ethereum	Source code: Verified source

Part of unshETH’s security record

unshETH

Audits3 audits by 2 firmsLast audit Jun 2023, by Paladin.

Critical findingsNo open critical findingsAcross 3 reports.

IncidentIncident 30 May 2023Source: De.Fi incident database.

Open unshETH’s security record

Security firm

Paladin

176 projects reviewed · 241 reports · latest Apr 2025

See Paladin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.