The liquid restaking network.
Scope
Contest Results
On what chains are the smart contracts going to be deployed?
Mainnet
Which ERC20 tokens do you expect will interact with the smart contracts?
Any, with the exception of rebasing tokens and tokens that charge a fee on transfer.
Which ERC721 tokens do you expect will interact with the smart contracts?
None
Do you plan to support ERC1155?
No
Which ERC777 tokens do you expect will interact with the smart contracts?
None
Are there any FEE-ON-TRANSFER tokens interacting with the smart contracts?
No
Are there any REBASING tokens interacting with the smart contracts?
No
Are the admins of the protocols your contracts integrate with (if any) TRUSTED or RESTRICTED?
TRUSTED
Is the admin/owner of the protocol/contracts TRUSTED or RESTRICTED?
TRUSTED
Are there any additional protocol roles? If yes, please explain in detail:
Factory Owner: This role can update the manager, update the voting adaptor, revoke unvested tokens, revoke all tokens (if enabled), and disable full revocation (if enabled).
Factory Manager: This role can revoke unvested tokens. This role should not be able to execute any other functions.
Vesting Escrow Recipient: This role can delegate, vote, vote with reason, and claim tokens. This role should not be able to claim tokens before they're vested.
Is the code/contract expected to comply with any EIPs? Are there specific assumptions around adhering to those EIPs that Watsons should be aware of?
No
Please list any known issues/acceptable risks that should not result in a valid finding.
The ability for the factory owner to swap out the voting adaptor while a delegate, vote, or vote with reason call is pending in order to trick a recipient into executing an arbitrary call.
Please provide links to previous audits (if any).
Not a direct audit, but worth mentioning as it's an audit of the Vyper code that the vesting escrow was originally "forked" from: https://github.com/lidofinance/lido-vesting-escrow/blob/main/audits/lido-trp-vesting-escrow.pdf
Are there any off-chain mechanisms or off-chain procedures for the protocol (keeper bots, input validation expectations, etc)?
No
In case of external protocol integrations, are the risks of external contracts pausing or executing an emergency withdrawal acceptable? If not, Watsons will submit issues related to these situations that can harm your protocol's functionality.
Yes, the risks of external governance integrations pausing or otherwise halting delegation and voting are acceptable.
Do you expect to use any of the following tokens with non-standard behaviour with the smart contracts?
No
Add links to relevant protocol resources
Total Rewards
Contest Pool
Lead Senior Watson
Judging Pool
Lead Judge
10,500 USDC
5,500 USDC
400 USDC
600 USDC
Status
Scope
Start Time
End Time
Finished
296 nSLOC
Jan 10, 2024, 3:00 PM
Jan 13, 2024, 3:00 PM