Pre-auditThree days of senior audit time for $1,500, credited in full toward your Zealynx audit.3 audit days, credited toward your auditSee how →
I-01·

Default documentation incorrectly states that every validator extraction path is frozen

Fixedethereumstakingeth-bonds
TL;DR

The validatorDefaulted NatSpec, declareDefault, and holderRedeemBondOrDefault state that every validator extraction path is frozen during a default.

Severity
INFO
Method
MManual review
CAT.
02Section · Description

Description

The validatorDefaulted NatSpec, declareDefault, and holderRedeemBondOrDefault state that every validator extraction path is frozen during a default.

validatorRedeemBonds has no default check and deliberately remains callable. It lets the validator select bonds and pay their full maturity values from the pooled Coffer balance into the redemption escrow, including bonds the validator acquired through another address. The README later describes this exception correctly, so the executable behavior is consistent with the intended first-come-first-served settlement model, but the earlier NatSpec and README statements are false.

Holders and integrations relying on those statements may incorrectly assume that the validator cannot direct any Coffer balance while a default stands.

03Section · Recommendations

Recommendations

State consistently that every validator extraction path except validatorRedeemBonds is frozen during a default. Add the exception to the validatorDefaulted, declareDefault, and holderRedeemBondOrDefault NatSpec, and document on validatorRedeemBonds that it remains available as the settlement path and lets the validator choose which full-value claims the pooled balance settles first.

04Section · Mitigation

Mitigation

Fixed. Commit dc1c05f corrects the README, NatSpec and test comments to state that validatorRedeemBonds remains available during default as a settlement path into the pull-payment escrow.

05Section · Report provenance

Report provenance

Source: the corrected final report dated 22 October 2026. Final status and residual conditions are preserved in this write-up. Read the full report.

Status
Fixed
I-01