Renzo audit contest
A public audit contest on Code4rena (liquid restaking), completed on 30th April 2024. 0xSimao placed #7. 6 of his findings are published: 4 high severity and 2 medium.
What Renzo is
Renzo is a liquid restaking token and strategy manager for EigenLayer: deposits mint ezETH while the protocol delegates the stake across node operators securing actively validated services, abstracting the restaking mechanics from the holder.
Scope
The restaking core: ezETH minting and pricing, the RestakeManager, operator delegation and reward flows.
High severity findings
- ETH withdrawals from EigenLayer always fail due to
OperatorDelegator's nonReentrantreceive() - Withdrawals logic allows MEV exploits of TVL changes and zero-slippage zero-fee swaps
- DOS of
completeQueuedWithdrawalwhen ERC20 buffer is filled - Incorrect withdraw queue balance in TVL calculation
Medium severity findings
- Withdrawals can fail due to deposits reverting in
completeQueuedWithdrawal() - Withdrawals and Claims are meant to be pausable, but it is not possible in practice
The contest