Llama Risk releases asset risk assessment of Puffer Finance pufETH, finding the protocol features robust security measures rated as "solid overall"

Llama Risk has published a dedicated collateral risk assessment for pufETH, the liquid restaking token issued by Puffer Finance, concluding that the asset’s security and design are “solid overall” and that the protocol is technically well constructed. The report evaluates pufETH as an asset candidate for use as DeFi collateral, reviewing its token mechanics, redemption flows, on‑chain architecture, dependencies, and governance. pufETH is described as a repricing liquid restaking token that allows users to deposit ETH, stETH, or wstETH into Puffer’s native liquid restaking protocol on EigenLayer, earning a combination of Ethereum proof‑of‑stake rewards, EigenLayer restaking rewards, and points programs, with the pufETH/ETH exchange rate increasing over time rather than distributing yield as separate rewards. Llama Risk highlights several strengths: multiple audits by reputable firms, a secure-signer setup and use of trusted execution environments (TEEs) to mitigate validator slashing risk, and a detailed multisig-based access control framework for protocol governance. It also notes that the protocol integrates EigenLayer for restaking and uses Base L2 to reduce reward withdrawal costs for validators, reflecting a relatively mature dependency and infrastructure design. At the same time, the assessment flags areas for improvement, including liquidity management risks around redemptions—especially during periods of low ETH availability in the PufferVault that could stress the pufETH/ETH peg—and the absence of a continuous bug bounty program. Historical peg volatility is acknowledged, with a past depeg of about −5.46% in August 2024, although the peg has since tightened. The overall message for integrators and risk managers is that pufETH currently presents a robust technical and governance profile for use as DeFi collateral, provided that teams account for liquidity, redemption, and dependency risks in their own risk frameworks.

✨ AI-generated background, compiled from web sources — not editorial content.

More coverage

• Collateral Risk Assessment - pufETH | LlamaRisk Research (llamarisk.com)
• Asset Risk Assessment: Falcon USDf | LlamaRisk Research (llamarisk.com)
• [ARFC] Onboard pufETH to Aave V3 Core Instance - New Asset (governance.aave.com)
• Blockchain Risk Assessment Frameworks for Smart Contracts (chain.link)
• Unpacking Treasury's DeFi Risk Assessment - TRM Labs (trmlabs.com)

Explore the topic

• Release
• LlamaRisk
• Security