Metapool security review

Nethermind Security10 Feb 2025Code version: not recorded (see the report)

Audit · firm’s term: security review

Nethermind Security reviewed Meta Pool (Metapool security review) on 10 Feb 2025: 7 findings, 2 critical; all marked fixed.

2 critical findings, fixed

Open the report Open Meta Pool’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings7

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	2
High	0	0	3
Medium	0	0	1
Low	0	0	1

CriticalIncorrect implementation of StakedIP::mintFixed

The report gives no description here.

CriticalUsers cannot deposit with WIPFixed

The report gives no description here.

HighExcessive IP tokens in Withdrawal contract cannot be restaked to StakedIPFixed

The report gives no description here.

HighRemove validator operation is buggy, creates duplicate entry in the arrayFixed

The report gives no description here.

HighRewardsManager cannot accept Native tokensFixed

The report gives no description here.

Mediumuser Staked tokens could be locked in withdraw contractFixed

The report gives no description here.

LowUse of transfer when sending native tokensFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Meta Pool’s security record

Meta Pool

Audits2 audits by 2 firmsLast audit Aug 2025, by Resonance Security.

Critical findingsNo open critical findingsAcross the 2 reports, 2 critical findings were reported. Each is marked fixed by the firm that reported it.

Open Meta Pool’s security record

Security firm

Nethermind Security

57 projects reviewed · 81 reports · latest Sep 2026

See Nethermind Security’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.