Puffer has engaged LlamaRisk for a qualitative audit and advisory service. To ensure full transparency and avoid any potential conflict of interest, we have elected to recuse ourselves from issuing a formal recommendation. However, stakeholders are encouraged to review our initial assessment—prepared prior to our official engagement—which provided a generally positive evaluation of the system architecture and safe AAVE integration.
Please note that this engagement does not constitute any representation or guarantee regarding asset issuer onboarding. We are actively working with Puffer to address identified deficiencies, including enhancements to the bug bounty program and improvements in access control segregation.