Search results

[Security] WBERAStakerVault: cancelQueuedWithdrawal re-mints shares at current rate, creating free option

Status: Open.

#32 In berachain/contracts;

· sailorpepe opened on Feb 25, 2026

[Security] WBERAStakerVault: completeWithdrawal(bool, uint256) has no caller ownership check

Status: Open.

#31 In berachain/contracts;

· sailorpepe opened on Feb 25, 2026

[Security] WBERAStakerVault: ERC4626 inflation/donation attack — no _decimalsOffset override

Status: Open.

#30 In berachain/contracts;

· sailorpepe opened on Feb 25, 2026

test(BeraChef): implement TODO fuzz and invariant tests for reward allocation

Status: Open.

#27 In berachain/contracts;

· sailorpepe opened on Feb 25, 2026

chore(Distributor): Dead code — pre-Pectra permissionless distributeFor path

Status: Open.

#25 In berachain/contracts;

· sailorpepe opened on Feb 25, 2026

src/pol/BeaconDeposit.sol operator address is prone to front-running

Status: Open.

#2 In berachain/contracts;

· sj448 opened on Jan 20, 2025