H-3 MitigationConfirmed

[c4-bot-8]

Lines of code

Vulnerability details

Original Issue Summary

• H-03: ETH withdrawals from EigenLayer always fail due to OperatorDelegator's nonReentrant receive()

ETH withdrawals from EigenLayer require a reentrancy in receive(). However, the receive() function uses the nonReentrant modifier, which prevents the reentrancy and ultimately resulting in ETH withdrawals from EigenLayer failing.

Mitigation

• Mitigation H-03

This mitigation proposes the removal of the nonReentrant modifier:

-    receive() external payable nonReentrant {
+    receive() external payable {

Comments

This mitigation succesfully mitigates H-03, reentrancy is now possible again in the receive() function, which means that the EigenLayer ETH withdraws will succeed.

Suggestion

n/a

Conclusion

LGTM

[liveactionllama]

Minor label update for consistency across all MR-H-03 submissions.

[c4-judge]

alcueca marked the issue as satisfactory