Stader - ETHx smart contracts (Phase 2)

Sigma Prime1 Jun 2023Code version: not recorded (see the report)

Audit · firm’s term: security assessment

Sigma Prime reviewed Stader (Stader - ETHx smart contracts (Phase 2)) on 1 Jun 2023: 13 findings, 0 critical; 8 marked fixed, 5 acknowledged.

No open critical findings

Open the report Open Stader’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings22

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	3
Medium	0	3	3
Low	0	2	2

Marked Informational by the firm. Not counted as findings.

InformationalBidIncrement Can Be Changed Using UpdateBidIncrement() Which Affects Ongoing AuctionsAcknowledged

The report gives no description here.

InformationalCentralisation Risk Due To Extensive System UpgradabilityAcknowledged

The report gives no description here.

InformationalMiscellaneous General Comments — Round 2Acknowledged

The report gives no description here.

InformationalPhantom Overflow In CalculateRewardShare()Acknowledged

The report gives no description here.

InformationalPotential Incorrect ETH Distribution In ValidatorWithdrawalVaultAcknowledged

The report gives no description here.

InformationalTrustedNode Cannot Update Incorrectly Submitted Oracle DetailsAcknowledged

The report gives no description here.

InformationalVaultProxy Does Not Follow Standard Proxy Pattern UsageAcknowledged

The report gives no description here.

InformationalCentralisation Risk In MaxApproveSD()Fixed

The report gives no description here.

InformationalOwner In VaultProxy Does Not Adhere To The Single Source Of Truth PrincipleFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Stader’s security record

Stader

Audits3 audits by 2 firmsLast audit Jan 2024, by Sigma Prime.

Critical findingsNo open critical findingsAcross the 3 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.

Open Stader’s security record

Security firm

Sigma Prime

36 projects reviewed · 78 reports · latest Aug 2026

See Sigma Prime’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.