ENZYME BLUE · FULL AUDIT

// VULNERABLE — answeredInRound discarded (, ethPerStethAnswer, startedAt_, updatedAt_,) = STETH_ETH_CHAINLINK_AGGREGATOR.latestRoundData(); // No: require(answeredInRound >= roundId, "Stale price")

// MISSING: heartbeat check // updatedAt_ passed through from stETH/ETH Chainlink feed // stethPerWsteth is ALWAYS fresh (Lido on-chain) // → composite answer_ = stale_eth_price × fresh_lido_rate // updatedAt_ < block.timestamp - 86400 → STALE but unchecked require(block.timestamp - updatedAt_ <= MAX_STALENESS, "Stale"); // ← this line is MISSING

if (redemptionApproval != type(uint256).max) { require(_sharesAmount <= redemptionApproval, "..."); delete userToRedemptionApproval[msg.sender]; // ← FULL DELETE // BUG: should be: // userToRedemptionApproval[msg.sender] -= _sharesAmount; }

// Base1 comment: "added after the 1st version: depositMode" // For all proxies where init() called without _depositMode param, // depositMode = DepositMode(0) = Direct // deposit() works without RequestAndApprove gate // → approval workflow intention bypassed silently

// Each instance has independent throttle.cumulativeLoss // Contract designed to LIMIT loss to lossTolerance per period // But N authorized instances = N × lossTolerance drainable // Attack: // 1. Attacker controls vault owner key // 2. Vault has 5 authorized SharePriceThrottled managers // 3. Each has lossTolerance=10% // 4. Execute drain on all 5 simultaneously → 50% fund drained // vs intended max of 10%

// canCancelTime = block.timestamp + minRequestTime // If minRequestTime = 0: // canCancelTime = block.timestamp ← can cancel immediately // Same-block add + cancel = no-cost queue spam

// Manager calls redeemFromQueue(50, 100) skipping users 0-49 // Users 0-49: NOT redeemed this window // Users 50-100: redeemed // Users 0-49 CANNOT cancel during window, CANNOT re-queue // Trapped until next window (frequency-based delay)