Summary
This document is a security review report for Affine Defi's restaking mechanism, conducted by independent security researcher MaslarovK. The review spans from May 2, 2024, to May 7, 2024, and includes a detailed examination of the smart contracts involved in the restaking process. The report outlines the risk classification framework used to evaluate potential vulnerabilities, categorizing them into high, medium, low, and informational risks. It presents specific findings related to high-risk issues, including incorrect calculations in the AffineDelegator::delegate function and improper handling of asset withdrawals in the UltraLRT contract. The report also provides recommendations for addressing these vulnerabilities, emphasizing the need for code modifications to enhance security. The methods employed in the review included manual testing and analysis of the smart contracts, with a focus on identifying critical and high-risk issues that could significantly impact the protocol's security.
