# Renzo audit contest Code4rena · Liquid restaking · 30th April 2024 · #7 A public audit contest on Code4rena (liquid restaking), completed on 30th April 2024. 0xSimao placed #7. 6 of his findings are published: 4 high severity and 2 medium. ## What Renzo is Renzo is a liquid restaking token and strategy manager for EigenLayer: deposits mint ezETH while the protocol delegates the stake across node operators securing actively validated services, abstracting the restaking mechanics from the holder. ## Scope The restaking core: ezETH minting and pricing, the RestakeManager, operator delegation and reward flows. ## High severity findings - [ETH withdrawals from EigenLayer always fail due to `OperatorDelegator`'s nonReentrant `receive()`](https://0xsimao.com/findings/renzo-eth-withdrawals-delegator-reentrant) - [Withdrawals logic allows MEV exploits of TVL changes and zero-slippage zero-fee swaps](https://0xsimao.com/findings/renzo-withdrawals-zero-slippage-fee) - [DOS of `completeQueuedWithdrawal` when ERC20 buffer is filled](https://0xsimao.com/findings/renzo-dos-withdrawal-erc20-filled) - [Incorrect withdraw queue balance in TVL calculation](https://0xsimao.com/findings/renzo-withdraw-queue-tvl-calculation) ## Medium severity findings - [Withdrawals can fail due to deposits reverting in `completeQueuedWithdrawal()`](https://0xsimao.com/findings/renzo-withdrawals-deposits-complete-withdrawal) - [Withdrawals and Claims are meant to be pausable, but it is not possible in practice](https://0xsimao.com/findings/renzo-withdrawals-meant-pausable-practice) ## The contest [View the contest page](https://code4rena.com/audits/2024-04-renzo)