Security Audit Report for Rhea Finance's Rhea LSD

The target of this audit is the private code repository of Rhea LSD of Rhea Finance. The protocol is deployed on the NEAR network and issues an LSD (Liquid Staking Derivative) token. Users deposit underlying tokens into the protocol, which are then supplied to Burrowland for yield generation. Privileged roles periodically withdraw rewards from Burrowland, swap them into underlying tokens, and re-deposit them to compound returns. Users can unstake at any time by burning their LSD tokens to redeem the corresponding underlying assets. The protocol also introduces cross-chain functionality, enabling users to complete both cross-chain transfers and deposits of underlying tokens within a single transaction.

Please refer to the report for the detailed audit scope.

Our audit methodology employs automated vulnerability scans, manual verification, and business logic analysis to uncover potential security issues coupled with gas and code quality optimization recommendations.

In summary, we have found that the codebase contains 1 high-risk issue that require prompt attention. In addition, we have identified other non-critical issues as well as recommendations and notes that should be considered. The Rhea LSD team has addressed these issues promptly. It is important to note that our audit covers only the final reported versions of the codebase. Any subsequent updates would require a re-evaluation.