Audit Report

Paladin6 addresses on Ethereum

Paladin reviewed unshETH (Audit Report) on 15 Jun 2023: 32 findings, 0 critical; 6 marked fixed, 22 acknowledged, 4 open.

No open critical findings
Open the reportOpen unshETH’s security record

Report hosted on paladinsec.co.

Trustblock does not review code.

Findings32

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High000
Medium213
Low2213
MediumGovernance risk: Any of the registered minters can freely mint tokensFixed

The report gives no description here.

MediumGovernance risk: Timelock functionality can be bypassed by the unshETH team to migrate and drain the vaultFixed

The report gives no description here.

MediumLack of cross-contract reentrancy checks can lead to serious side- effects due to the usage of multiple contractsFixed

The report gives no description here.

LowContract design is extremely limitedFixed

The report gives no description here.

LowLack of validationFixed

The report gives no description here.

LowTypographical issuesFixed

The report gives no description here.

Contracts in scope6

AddressChainSource code
0x0ae38f7e10a43b5b2fb064b42a2f4514cba909efChain: EthereumSource code: Verified source
0xc258ff338322b6852c281936d4edeff8adff23eeChain: EthereumSource code: Verified source
0xb250216b5bce306fa37f7de76a82409663ed52c3Chain: EthereumSource code: Verified source
0x1a890ebcd20a9fb551c0440428805bc24ef62641Chain: EthereumSource code: Verified source
0x35636b85b68c1b4a216110fb3a5fb447a99db14aChain: EthereumSource code: Verified source
0x51a80238b5738725128d3a3e06ab41c1d4c05c74Chain: EthereumSource code: Verified source

Part of unshETH’s security record

unshETH
Audits3 audits by 2 firmsLast audit Jun 2023, by Paladin.
Critical findingsNo open critical findingsAcross 3 reports.
IncidentIncident 30 May 2023Source: De.Fi incident database.
Open unshETH’s security record

Security firm

Paladin

176 projects reviewed · 241 reports · latest Apr 2025

See Paladin’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us