Forta Delegated Staking

ConsensysFiles named in the report

Audit

Consensys reviewed Forta (Forta Delegated Staking) on 1 Nov 2022: 12 findings, 1 critical; all marked fixed.

1 critical finding, fixed
Open the reportOpen Forta’s security record

Report hosted on diligence.security.

Trustblock does not review code.

Findings12

Statuses are the security firm’s own, from its report.

SeverityOpenAcknowledgedFixed
Critical001
High002
Medium004
Low005
CriticaldidTransferShares function has no access control modifierFixed

The report gives no description here.

HighA single unfreeze dismisses all other slashing proposal freezesFixed

The report gives no description here.

HighIncorrect reward epoch start date calculationFixed

The report gives no description here.

MediumAgentRegistryCore - Agent Creation DoSFixed

The report gives no description here.

MediumLack of checks for rewarding an epoch that has already been rewardedFixed

The report gives no description here.

MediumReentrancy in FortaStaking during ERC1155 mintsFixed

The report gives no description here.

MediumStorage gap variables slightly off from the intended sizeFixed

The report gives no description here.

LowComment and code inconsistenciesFixed

The report gives no description here.

LowEvent spam in RewardsDistributor.claimRewardsFixed

The report gives no description here.

LowLack of a check for the subject’s stake for reviewSlashProposalParametersFixed

The report gives no description here.

Show 2 more
LowSubjectTypes.sol files unusedFixed

The report gives no description here.

LowUnnecessary code blocks that check the same conditionFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Repository and files the report names (52)

  • code/contracts/token/FortaBridgedPolygon.sol
  • code/contracts/components/staking/stake_subjects/IStakeSubjectGateway.sol
  • code/contracts/components/BaseComponentUpgradeable.sol
  • code/contracts/components/agents/AgentRegistry.sol
  • code/contracts/components/utils/IVersioned.sol
  • code/contracts/tools/ENSReverseRegistration.sol
  • code/contracts/components/node_runners/NodeRunnerRegistryCore.sol
  • code/contracts/components/scanners/ScannerNodeVersion.sol
  • code/contracts/components/utils/ForwardedContext.sol
  • code/contracts/components/agents/AgentRegistryCore.sol
  • code/contracts/components/node_runners/NodeRunnerRegistry.sol
  • code/contracts/components/access/AccessManager.sol
  • code/contracts/components/staking/stake_subjects/DelegatedStakeSubject.sol
  • code/contracts/components/staking/allocation/IStakeAllocator.sol
  • code/contracts/errors/GeneralErrors.sol
  • code/contracts/components/staking/slashing/SlashReasons.sol
  • code/contracts/components/staking/FortaStaking.sol
  • code/contracts/components/utils/AccessManaged.sol
  • code/contracts/components/staking/rewards/Accumulators.sol
  • code/contracts/components/scanners/ScannerRegistry.sol
  • code/contracts/components/utils/Routed.sol
  • code/contracts/components/Roles.sol
  • code/contracts/components/staking/slashing/SlashingController.sol
  • code/contracts/components/staking/stake_subjects/IDelegatedStakeSubject.sol
  • code/contracts/components/node_runners/NodeRunnerRegistryManaged.sol
  • code/contracts/components/dispatch/Dispatch.sol
  • code/contracts/components/scanners/ScannerRegistryCore.sol
  • code/contracts/components/agents/AgentRegistryEnumerable.sol
  • code/contracts/components/staking/stake_subjects/IDirectStakeSubject.sol
  • code/contracts/components/staking/rewards/IRewardReceiver.sol
  • code/contracts/tools/Distributions.sol
  • code/contracts/token/Forta.sol
  • code/contracts/components/scanners/ScannerRegistryMetadata.sol
  • code/contracts/components/utils/StateMachines.sol
  • code/contracts/components/staking/rewards/RewardsDistributor.sol
  • code/contracts/components/staking/stake_subjects/DirectStakeSubject.sol
  • code/contracts/tools/FrontRunningProtection.sol
  • code/contracts/components/staking/slashing/ISlashingExecutor.sol
  • code/contracts/components/agents/AgentRegistryMetadata.sol
  • code/contracts/components/staking/stake_subjects/StakeSubjectGateway.sol
  • code/contracts/components/staking/rewards/IRewardsDistributor.sol
  • code/contracts/components/agents/AgentRegistryEnable.sol
  • code/contracts/components/scanners/ScannerRegistryManaged.sol
  • code/contracts/components/staking/SubjectTypeValidator.sol
  • code/contracts/components/staking/IStakeMigrator.sol
  • code/contracts/components/scanners/ScannerRegistryEnable.sol
  • code/contracts/token/FortaCommon.sol
  • code/contracts/components/staking/allocation/StakeAllocator.sol
  • code/contracts/components/staking/SubjectTypes.sol
  • code/contracts/components/scanners/ScannerToNodeRunnerMigration.sol
  • code/contracts/components/staking/FortaStakingUtils.sol
  • code/contracts/components/staking/stake_subjects/IStakeSubject.sol

Part of Forta’s security record

Forta
Audits4 audits by 2 firmsLast audit Jan 2025, by OpenZeppelin.
Critical findingsNo open critical findingsAcross the 4 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.
Open Forta’s security record

Security firm

Consensys

41 projects reviewed · 59 reports · latest Oct 2024

See Consensys’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.

Tell us