Stader - ETHx smart contracts (Phase 2)

Sigma PrimeCode version: not recorded (see the report)

Audit · firm’s term: security assessment

Sigma Prime reviewed Stader (Stader - ETHx smart contracts (Phase 2)) on 1 Jun 2023: 13 findings, 0 critical; 8 marked fixed, 5 acknowledged.

No open critical findings
Open the reportOpen Stader’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings22

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical000
High003
Medium033
Low022
HighDoS In StakeUserETHToBeaconChain() Due To Forced ETH Transfer Through SelfDestructFixed

The report gives no description here.

HighMalicious Node Operators Can Cause a DoS through DistributeRewards() And SettleFunds(), Locking User FundsFixed

The report gives no description here.

HighOperatorRewardsCollector Missing Call To OZ _disableInitializersFixed

The report gives no description here.

MediumDuplicate PoolIds Can Cause Loss Of Funds For UsersFixed

The report gives no description here.

MediumNo Minimum Trusted Node ValidationFixed

The report gives no description here.

MediumStaderConfig Cannot Be UpdatedFixed

The report gives no description here.

LowMiscellaneous General CommentsFixed

The report gives no description here.

LowPartial DoS Possible For User WithdrawalsFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Stader’s security record

Stader
Audits3 audits by 2 firmsLast audit Jan 2024, by Sigma Prime.
Critical findingsNo open critical findingsAcross the 3 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.
Open Stader’s security record

Security firm

Sigma Prime

36 projects reviewed · 78 reports · latest Aug 2026

See Sigma Prime’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us