pSTAKE Native Auto-Compounding and Rebalancing aud
Audit · firm’s term: security audit
Oak Security reviewed Persistence (pSTAKE Native Auto-Compounding and Rebalancing aud) on 26 Jan 2024: 21 findings, 5 critical; 16 marked fixed, 5 acknowledged.
Report hosted on GitHub.
Trustblock does not review code.
Findings21
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 1 | 4 |
| High | 0 | 2 | 4 |
| Medium | 0 | 0 | 0 |
| Low | 0 | 2 | 8 |
CriticalAttackers can halt the chain by performing numerous minimal unstaking requests from different accountsFixed
The report gives no description here.
CriticalAttackers can prevent users from liquid-staking funds by removing the Deposit entryFixed
The report gives no description here.
CriticalIncorrect bookkeeping of validator’s delegated amount upon redelegationFixed
The report gives no description here.
CriticalRisk of gas exhaustion for unbounded ICA messagesFixed
The report gives no description here.
HighIncorrect comparison between shares and tokensFixed
The report gives no description here.
HighThe DoRedeemLSMTokens function consumes excessive computational resources in the BeginBlockerFixed
The report gives no description here.
HighThe rewards account balance is not updated on OnChanOpenAckFixed
The report gives no description here.
HighValidators are incorrectly set to non-delegable for default bond factor valuesFixed
The report gives no description here.
LowA significant decrease in CValue could disable the host chain and require a global parameters updateFixed
The report gives no description here.
LowFees lack validationFixed
The report gives no description here.
Show 6 more
LowHost denom can be registered with multiple host chainsFixed
The report gives no description here.
LowIncomplete HostChain validationFixed
The report gives no description here.
LowLowerCValueLimit can be misconfigured as a negative valueFixed
The report gives no description here.
LowThe bond factor is not set to the default value when registering host chainsFixed
The report gives no description here.
LowThe RegisterHostChain function allows toFixed
The report gives no description here.
LowUnhandled errors in the codebaseFixed
The report gives no description here.
Contracts in scope
No deployed address is recorded for this audit.
The report names a repository or files. Open the report to see its scope.
Part of Persistence’s security record
PersistenceSecurity firm
Oak Security33 projects reviewed · 60 reports · latest May 2026
See Oak Security’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us