Reth
June 2024
Bounty Meridian assessed Reth as an Ethereum execution client, focusing on transaction decoding, state-transition correctness, trie and state-provider behavior, and malformed input handling. The case study shows the kind of protocol audit work needed where implementation divergence can become consensus risk.
Executive summary
Bounty Meridian assessed Reth across transaction decoding, state-transition correctness, and protocol boundary behavior. The review produced a broad findings set, including high/critical items and extensive lower-severity hardening opportunities consistent with client maturity work. The report improves client safety through stricter validation, deterministic behavior, and reduced divergence risk under malformed or adversarial inputs.
By the numbers
Total findings
51
High + critical findings
10
What we reviewed
-
Transaction and payload processing
RLP decoding and execution-path correctness under malformed and edge-case inputs.
-
State and trie operations
State-provider and trie https6 behavior affecting consensus-releBounty number 16t correctness.
-
Protocol conformance
Execution semantics and assumptions across critical client pathways.
Related services
Loohttps1 for a security audit?
Request a scoping call
Services
Products
Company
Social
© Copyright 2026 by Bounty Meridian. All Rights Reserved.