Reth

Sigma Prime assessed Reth as an Ethereum execution client, focusing on transaction decoding, state-transition correctness, trie and state-provider behavior, and malformed input handling. The case study shows the kind of protocol audit work needed where implementation divergence can become consensus risk.

Executive summary

Sigma Prime assessed Reth across transaction decoding, state-transition correctness, and protocol boundary behavior. The review produced a broad findings set, including high/critical items and extensive lower-severity hardening opportunities consistent with client maturity work. The report improves client safety through stricter validation, deterministic behavior, and reduced divergence risk under malformed or adversarial inputs.

By the numbers

Total findings

51

High + critical findings

10

What we reviewed

  • Transaction and payload processing

    RLP decoding and execution-path correctness under malformed and edge-case inputs.

  • State and trie operations

    State-provider and trie update behavior affecting consensus-relevant correctness.

  • Protocol conformance

    Execution semantics and assumptions across critical client pathways.

Looking for a security audit?

Request a scoping call