Reddio 9.25 ETH Loss Attributed to stETH Double-Counting Flaw
SlowMist identifies cross-vault balance error between permissionless stETH and ETH vaults at Reddio.
SlowMist disclosed that Reddio lost approximately 9.25 ETH due to a cross-vault asset double-counting flaw.
stETH deposited into a permissionlessly registered stETH vault was also included in the ETH vault’s getTotalAssetBalance(ETH) function, causing the same assets to be counted twice.
What remains unknown
The exact on-chain timeline, whether the vulnerability has been fully patched network-wide, any user impact beyond the stated loss, and whether similar double-counting vectors exist in other vaults remain unknown.